Rsyslog日志服务器部署-LogAnalyzer+MySQL
搭建lnmp见
http://liang-yao.cnblogs.com/p/8448362.html
yum install -y rsyslog-mysql
导入数据库
mysql -u root -p < /usr/share/doc/rsyslog-7.4.7/mysql-createDB.sql
可以通过 rpm -ql rsyslog-mysql | grep createDB查询位置
/usr/share/doc/rsyslog-7.4.7/mysql-createDB.sql
创建用户并授予权限
grant all on Syslog.* to rsyslogs@localhost identified by '123456';
刷新权限
flush privileges;
vim /etc/rsyslog.conf
#### MODULES ####
$ModLoad ommysql
*.*:ommysql:localhost,Syslog,rsyslogs,123456
Syslog为数据库名,rsyslogs为数据库的用户,123456为该用户密码
$ModLoad immark #immark是模块名,支持日志标记
$ModLoad imtcp #支持TCP协议
$InputTCPServerRun 514 #打开514端口以接收日志
systemctl restart rsyslog
log-client配置
vim /etc/rsyslog.conf
*.* @@192.168.200.101:514
systemctl restart rsyslog
在log-server上查看日志
cat /var/log/messages
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo24Pvl_hiv_PeaN7cH_rCKdh8wDMyYNANfMKOpdBc_hLe.png)
02为log-client主机名(主机名不要相同)
安装loganalyzer
wget http://download.adiscon.com/loganalyzer/loganalyzer-4.1.5.tar.gz
tar xzvf loganalyzer-4.1.5.tar.gz
cd loganalyzer-4.1.5/src/
mkdir /usr/share/nginx/html/loganalyzer
mv * /usr/share/nginx/html/loganalyzer
chown -R nginx:nginx /usr/share/nginx/html/loganalyzer/*
访问http://192.168.200.101/loganalyzer/
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo24y9UynOs9wiMt0AETjLutYTUzIdCpDqNOdEaof60bdY.png)
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo27pB1jKW4ttd3q97AoEH3b79LTidFjPxqOijs099KZbQ.png)
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo25d8eYDsU0gIK6HKSl1O9mHG8XCLq824meC_5vnBSXiW.png)
touch /usr/share/nginx/html/loganalyzer/config.php
chmod 666 /usr/share/nginx/html/loganalyzer/config.php
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo2xWtrqq41ZS3SV8b_fTSZlGHeaTTh3x2F_VgFQRnXt3u.png)
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo27hvyOM_N9070TDhCEbtyVo_eRtd0_A2VSd_OiLw_hOo.png)
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo2xQEhCbYilkNqoBP4vrw1FE5fwCFqhIyFCYwLzZjHA0h.png)
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo24Z50e9FfabYh_-DJ_TDnHn4hRNF41zvWm3Jha0nY36e.png)
![Rsyslog日志服务器部署-LogAnalyzer+MySQL Rsyslog日志服务器部署-LogAnalyzer+MySQL](https://cdn.ancii.com/article/image/v1/sY/fn/RV/VRfYnsfiw8FmOoknmURpINNpVSAFhSOluTdiTXAF7Aq75MWLl-rv6v-bMCnsZNOTYpgnr_v0PqpQRVxniOAo28YALWNvNVB38zeVNaaAxRoDiDN6pOudORaZtgb1JG9H.png)
相关推荐
使用Log4j的SystemLogAppender可以实现远程的日志输出,为集中式的日志管理提供便利。/etc/init.d/syslog start3. 在写日志的客户机上,修改log4j配置文件: