Better syslog message handling for Zabbix

[zalex_ua]

Works beautiful
I just have one question, why Panic and Emeg have same color and same value, EMERGENCY?

Feel free to vote for https://support.zabbix.com/browse/ZBXNEXT-470

[MrDeath87]

Feel free to vote for https://support.zabbix.com/browse/ZBXNEXT-470

how to vote ?

Thanks for the ZIP. I'll need to sort out what you have changed in order to update Zbxlog SVN.

Welcome, glad to help.

BTW, if in local syslog i trap log from other host, ex. Cisco, it si posible to add more Syslog facilities ? or not ?

[JBo]

where to vote ?

You need to have an account on support.zabbix.com for that.

BTW, if in local syslog i trap log from other host, ex. Cisco, it si posible to add more Syslog facilities ? or not ?

You can't add facilities. They are defined in syslog RFCs.
If your syslog-ng is collecting syslog messages from a remote host, you are using it as a proxy. See the part «Integration with syslog-ng as a syslog proxy» in README.
Zbxlog will then send syslog messages to corresponding host in Zabbix.

JBo

[MrDeath87]

You need to have an account on support.zabbix.com for that.



You can't add facilities. They are defined in syslog RFCs.
If your syslog-ng is collecting syslog messages from a remote host, you are using it as a proxy. See the part «Integration with syslog-ng as a syslog proxy» in README.
Zbxlog will then send syslog messages to corresponding host in Zabbix.

JBo

aha, ok thx for quick reply. Will test ...

[MrDeath87]

Exists any way to sort by Syslog severities in Zabbix GUI ?

[JBo]

Hi,

Exists any way to sort by Syslog severities in Zabbix GUI ?

No.
It would be nice to be able to sort and/or filter by source,severity,eventID.
Feel free to open a new issue on bug tracker.

Alternatively, if you are only interested in syslog messages with a specific severity level, you can add a new item of the form «syslog[,,<severity>]».
Check Zbxlog README for details.

Regards,
JBo

[DmitryGFP]

Hello!

I've got FreeBSD for zabbix server, is it possible to install zbxlog on FreeBSD?

If yes - then what should I change in installation process?
Is there any manual to read/README?

[JBo]

Hi,

Hello!
I've got FreeBSD for zabbix server, is it possible to install zbxlog on FreeBSD?

No experience on FreeBSD.
Right now it has been installed on several Linux variants (Debian, CentOS, Gentoo).
Zbxlog itself is pure Perl so it should run on any Unix like OS.

If yes - then what should I change in installation process?

You will probably need to adapt startup script (/etc/init.d/zbxlog).
You'll need to make sure that all needed Perl modules are installed (they are listed in README).

Is there any manual to read/README?

Zbxlog includes a README with detailed instructions. They are Linux oriented but should help you.

Feel free to report any result.
Your feedback will be appreciated.

Regards,
JBo

[zalex_ua]

I can prepare init script for FreeBSD.

[DmitryGFP]

zalex_ua, I'll be very grateful if you prepare the init script.

I checked, Perl modules seem to be OK, anyways I can manage this issue by myself.

Thanks in advance!

[danny818]

Hi,

I have just released zbxlog v0.9.1 (http://www.alixen.org/attachments/do...log-r0.9.1.tgz).

This release adds:

• Support single Zbxlog server in distributed monitoring with zabbix_proxy

It adds a new configuration parameter in zbxlog.conf:

• simulate_zabbix_proxy
  • 1 to activate for this new feature
  • 0 (default value) means that there is one zbxlog process per zabbix_proxy
  
  

This is the first release of this new feature which has following limitations:

• Only tested with mysql database backend
• Supports only current 1.8 database schema

These limitations will be removed in next few days.

Tof233, since this feature specially interests you, please report any result you get.

Happy syslog monitoring !
JBo

hi,JBO
1 ）I use ur zbxlog v0.9.1,I have configured the zbxlog.conf with mysql parameter ,but cann't connect to mysql DB,why? Please SEE THE ATTACHEMENT PIC.

2） And does zbxlog v0.9.1 support network equipment syslog yet? thank U.

[danny818]

hi,JBO
1 ）I use ur zbxlog v0.9.1,I have configured the zbxlog.conf with mysql parameter ,but cann't connect to mysql DB,why? Please SEE THE ATTACHEMENT PIC.

2） And does zbxlog v0.9.1 support network equipment syslog yet? thank U.

NO.1question has been solved.
but I can't receive any syslog ,why？

[JBo]

Hi,

NO.1question has been solved.
but I can't receive any syslog ,why？

1. Glad to see you solved DB connection problem by yourself.
2. Zbxlog supports any equipment that uses syslog; that includes network equipment.
   How do you know you don't receive syslog messages ?
   1. Have you configured your network device to forward its syslog messages to zbxlog ?
   2. Have you added syslog[] items to corresponding host in Zabbix configuration ?
   3. Have you defined a «nomatchhost» in Zabbix configuration as defined in zbxlog.conf (this is not required but it helps debug since it will receive all syslog messages that don't match any other host).
   
   

Regards,
JBo

[danny818]

Hi,

1. Glad to see you solved DB connection problem by yourself.
2. Zbxlog supports any equipment that uses syslog; that includes network equipment.
   How do you know you don't receive syslog messages ?
   1. Have you configured your network device to forward its syslog messages to zbxlog ?
   2. Have you added syslog[] items to corresponding host in Zabbix configuration ?
   3. Have you defined a «nomatchhost» in Zabbix configuration as defined in zbxlog.conf (this is not required but it helps debug since it will receive all syslog messages that don't match any other host).
   
   

Regards,
JBo

hi,JBo

I have configured «nomatchhost» and I can recieve network equipment syslog by zbxlog;

I have added an item for my zabbix server(linux)as said syslog[] ,but I still can't recieve linux syslog even the zabbix server itself. I dont't know what's the problem.

[JBo]

Hi

I have added an item for my zabbix server(linux)as said syslog[] ,but I still can't recieve linux syslog even the zabbix server itself. I dont't know what's the problem.

May be a dumb question but have you configured syslog forwarding in zabbix server ?

Regards,
JBo