centos7 安装配置rsyslog + LogAnalyzer + mysql

https://www.cnblogs.com/mchina/p/linux-centos-rsyslog-loganalyzer-mysql-log-server.html

安装LNMP

一键安装包：https://lnmp.org/download.html

下载稳定版

nginx 1.12.2 + PHP5.5.38 + mysql 5.7.18

nginx配置：

cat loganalyzer.conf

server {
listen 80;
#listen [::]:80 default_server ipv6only=on;
server_name localhost;
index index.html index.htm index.php;
root  /var/webroot/loganalyzer;

include enable-php.conf;

location ~ /\. {
deny all;
}

access_log  /data/log/loganalyzer.access.log;
}

cat enable-php.conf
location ~ [^/]\.php(/|$)
{
try_files $uri =404;
fastcgi_pass  unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
include fastcgi.conf;
}

显示IP







rsyslog 终端弹出消息 Message from syslogd@p172-16-9-14.tdvm.com at Jan 16 13:59:34 ...

解决方法：删除edac模块，是在开机前将外在的usb光驱拔掉引起的

先停止syslog：

systemctl stop rsyslog

lsmod | grep edac # 是否有以下两个模块

sb_edac 32018 0
edac_core 58151 1 sb_edac

把/etc/rsyslog/conf OmitLocalLogging 改成如下值

$OmitLocalLogging off

rmmod sb_eda
rmmod edac_core

再开启rsyslog

systemctl start rsyslog

添加字段提示：Field 'Sortable' doesn't have a default value

解决方法：在/etc/my.conf的 [mysqld] 块中添加下面这行

sql-mode="NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

ESXi 设置 syslog



防火墙开放syslog端口





Dell iDrac设置远程syslog