centos7 安装配置rsyslog + LogAnalyzer + mysql

https://www.cnblogs.com/mchina/p/linux-centos-rsyslog-loganalyzer-mysql-log-server.html

安装LNMP

一键安装包：https://lnmp.org/download.html 

下载稳定版

 nginx 1.12.2 + PHP5.5.38 + mysql 5.7.18

nginx配置：

cat loganalyzer.conf

server {
        listen 80;
        #listen [::]:80 default_server ipv6only=on;
        server_name localhost;
        index index.html index.htm index.php;
        root  /var/webroot/loganalyzer;


        include enable-php.conf;

        location ~ /. {
            deny all;
        }

        access_log  /data/log/loganalyzer.access.log;
}




cat enable-php.conf 
        location ~ [^/].php(/|$)
        {
            try_files $uri =404;
            fastcgi_pass  unix:/tmp/php-cgi.sock;
            fastcgi_index index.php;
            include fastcgi.conf;
        }

显示IP

 

rsyslog 终端弹出消息 Message from syslogd@p172-16-9-14.tdvm.com at Jan 16 13:59:34 ...

解决方法：删除edac模块，是在开机前将外在的usb光驱拔掉引起的

先停止syslog：

systemctl stop rsyslog

lsmod | grep edac  # 是否有以下两个模块

    sb_edac                32018     0
    edac_core             58151     1   sb_edac

把/etc/rsyslog/conf OmitLocalLogging 改成如下值

$OmitLocalLogging off 

rmmod sb_eda
rmmod edac_core

再开启rsyslog

systemctl start rsyslog

添加字段提示：Field 'Sortable' doesn't have a default value

解决方法：在/etc/my.conf的 [mysqld] 块中添加下面这行

sql-mode="NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

ESXi 设置 syslog

防火墙开放syslog端口

Dell iDrac设置远程syslog