将syslog ng日志写入MySQL（远程）数据库

Centos6.5

syslog-ng 3.25

mysql

1，yum install syslog-ng.x86_64

2，yum install mysql.x86_64    // 支持mysql 命令运行

3，mkfifo –m 777 /var/log/mysql.pipe    // 创建通道并赋予权限

4， logsys-ng.conf  // 修改配置文件

//源

source s_sys {

        file ("/proc/kmsg" program_override("kernel: "));

        unix-stream ("/dev/log");

        internal();

        # udp(ip(0.0.0.0) port(514));

};

//规则  用默认的，自己写也行

filter f_default    { level(info..emerg) and

                        not (facility(mail)

                        or facility(authpriv) 

                        or facility(cron)); };

// 传输目标

destination mysql {

program("mysql -h20.10.10.10 -uxxxxx -pxxxxx table < /var/log/mysql.pipe");

pipe("/var/log/mysql.pipe"

template("INSERT INTO w_sys_logs (host, facility, priority, level, tag,

datetime, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY',

'$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$PRORAM',

'$MSG' );n") template-escape(yes) ); };

// table 为 数据库名

// 消息组合

log { source(s_sys); filter(f_default);destination(mysql); };

// 创建数据库

DROP TABLE IF EXISTS `w_sys_logs`;

CREATE TABLE `w_sys_logs` (

  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT,

  `host` varchar(32) DEFAULT NULL,

  `facility` varchar(10) DEFAULT NULL,

  `priority` varchar(10) DEFAULT NULL,

  `level` varchar(10) DEFAULT NULL,

  `tag` varchar(10) DEFAULT NULL,

  `datetime` datetime DEFAULT NULL,

  `program` varchar(15) DEFAULT NULL,

  `msg` text,

  PRIMARY KEY (`id`),

  KEY `host` (`host`),

  KEY `program` (`program`),

  KEY `datetime` (`datetime`),

  KEY `priority` (`priority`),

  KEY `facility` (`facility`)

) ENGINE=InnoDB AUTO_INCREMENT=81 DEFAULT CHARSET=utf8;

转载请注明：http://8463390.blog.51cto.com/8453390/1911623