Archived community.zenoss.org | full text search
Skip navigation
Up to Discussions in zenoss-users
53796 Views 5 Replies Latest reply: Oct 16, 2009 9:29 AM by Matt Ray RSS
skatta33 Rank: White Belt
skatta33
7 posts since
Aug 9, 2007
Currently Being Moderated

Aug 25, 2007 1:57 PM

syslog

Hi EAD,
How are you?
I have setup zenoss 2.0.4 on Centos5.0 without any problem.
Every thing is running fine.

I want setup a thing that,see the events from syslog on zenoss devices.
Could you please letme know what I can do on Zenoss client device and Zenoss server for to see the device syslog events in the enent console on the Zenoss server.

Please advice me.

Thanks,
Srinivas
  • Chet Luther ZenossEmployee
    Chet Luther
    1,302 posts since
    May 22, 2007
    Currently Being Moderated
    1. Aug 26, 2007 2:29 PM (in response to skatta33)
    RE: syslog
    Srinivas,

    You simply need to configure the monitored device to log to the Zenoss server. As long as the zensyslog daemon is running on the Zenoss server (this is the default) it will automatically turn the syslogs into events.

    How you configure the monitored system to log remotely depends entirely on what kind of device it us.
  • tobes Rank: White Belt
    tobes
    24 posts since
    Aug 28, 2007
    Currently Being Moderated
    2. Aug 28, 2007 11:15 AM (in response to Chet Luther)
    RE: syslog
    Hi there

    I am having problems with my syslogging, I have the process running no problem but I do nto see any events.

    I have seen a couple of entries in the log as per below:-2007-08-28 11:23:52 WARNING zen.Syslog: parseTag failed:''
    2007-08-28 11:23:53 WARNING zen.Syslog: parseTag failed:''
    2

    Any ideas? Do you have to propgate the conf file with anything?

    Thanks
  • skatta33 Rank: White Belt
    skatta33
    7 posts since
    Aug 9, 2007
    Currently Being Moderated
    3. Aug 29, 2007 2:06 PM (in response to tobes)
    Thanks
    Cluther,

    Thanks for the info.

    Now,my device was forwarding syslog events to Zenoss server without any problem.

    And now,I am seeing all syslog alerts in the Event Console on the Zenoss server.

    Seems,2 processes /etc/init.d/syslog and /opt/zenoss/bin/zensyslog are running on the Zenoss server.

    Here is the netstat info about syslog I have found on my Zenoss server.

    udp 0 0 *:syslog *.*

    I have a question here.

    There is no problem for above setup,If Zenoss and its devices opened all the ports.

    But,I was getting problem if a firewall comes in-between Zenoss server and devices.

    What ports,I need open at firewall level for 2 separate subnets.

    And my 2nd question is,on what ports I should run the /etc/init.d/syslog and /opt/zenoss/bin/zensyslog services and What I should keep port info in /etc/services and /opt/zenoss/etc/zensyslog.conf files.

    Please advice me.

    Thanks,
    Srinivas
  • Rad Newbie
    Rad
    1 posts since
    Sep 18, 2009
    Currently Being Moderated
    4. Oct 15, 2009 10:41 AM (in response to Chet Luther)
    Re: RE: syslog

    hi Chet,

     

    we can see syslog messages at event console but only from file source.

    could we put syslog messages at first at db, add a some info and than see it from event console?

     

    thanks, Rad

  • Matt Ray Rank: Zen Master
    Matt Ray
    2,484 posts since
    Apr 5, 2008
    Currently Being Moderated
    5. Oct 16, 2009 9:29 AM (in response to Rad)
    Re: RE: syslog
    There are some examples in this wiki page: Event Transforms & Examples of modifying event descriptions with transforms if that's what you want to do.  You could query the event and the device it's from and use that to add additional information to your events with a transform.

More Like This

  • Retrieving data ...