we would need to see a sample message that did not get written. you may also
want to look at the log messages of the database to see if it logged an error.
one possible reason would be if the msg field included a quote character in it,
but there are logs of other possible reasons.
David Lang
On Fri, 2 Jul 2021, Ozgur Kara wrote:
Date: Fri, 02 Jul 2021 23:35:07 +0400
From: Ozgur Kara <[email protected]>
To: rsyslog-users <[email protected]>
Cc: David Lang <[email protected]>
Subject: Rsyslog insert DB problem
Hello all,
I having a problem with rsyslog sql and need help.
I want to write to a simple syslog log to SQL.
I added rsyslog.conf:
$ModLoad ommysql
$template SQLTPL, "INSERT INTO Log_Messages (receivedAt, deviceTime, facility,
priority, fromHost, syslogTag, message) VALUES ('%timegenerated:::date-mysql%',
'%timereported:::date-mysql%', %syslogfacility%, %syslogpriority%, '%HOSTNAME%',
'%syslogtag%', '%msg%')",SQL
*.* :ommysql:localhost,devel_opennims,***USERNAME***,***PASSWORD***;SQLTPL
and i want contains "hoster" message select and write sql
:msg, contains, "hoster" :ommysql:10.100.100.10,testdb,admin,qwerty;SQLTPL
but when hoster log is created, rsyslog doesnt write it to db on mysql, why do
you think?
rsyslog version:
rsyslogd 8.1901.0
Please help,
Regards
Ozgur
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
