Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-2690

Syslog in Observium not working, No syslog entries found!

Details

    • Help
    • Resolution: Fixed
    • Trivial
    • None
    • Professional Edition

    Description

      Hello all,

      We enabled Syslog in Observium for our devices, and after following the documentation (docs.observium.org/syslog/) and validation, the page shows: No syslog entries found!.

       

      # rsyslogd -version
      rsyslogd 8.24.0, compiled with:
      	PLATFORM:				x86_64-pc-linux-gnu
      	PLATFORM (lsb_release -d):		
      	FEATURE_REGEXP:				Yes
      	GSSAPI Kerberos 5 support:		Yes
      	FEATURE_DEBUG (debug build, slow code):	No
      	32bit Atomic operations supported:	Yes
      	64bit Atomic operations supported:	Yes
      	memory allocator:			system default
      	Runtime Instrumentation (slow code):	No
      	uuid support:				Yes
      	Number of Bits in RainerScript integers: 64See http://www.rsyslog.com for more information.
       
      # service rsyslog status
      ● rsyslog.service - System Logging Service
         Loaded: loaded (/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)
         Active: active (running) since Fri 2018-06-08 10:06:30 CEST; 11min ago
           Docs: man:rsyslogd(8)
                 http://www.rsyslog.com/doc/
       Main PID: 11264 (rsyslogd)
          Tasks: 6 (limit: 4915)
         Memory: 26.0M
            CPU: 887ms
         CGroup: /system.slice/rsyslog.service
                 ├─11264 /usr/sbin/rsyslogd -n
                 └─11689 php /opt/observium/syslog.phpJun 08 10:06:30 nettools systemd[1]: Starting System Logging Service...
      Jun 08 10:06:30 liblogging-stdlog[11264]:  [origin software="rsyslogd" swVersion="8.24.0" x-pid="11264" x-info="http://www.rsyslog.com"] start
      Jun 08 10:06:30 systemd[1]: Started System Logging Service.
       
      # netstat -anp | grep :514
      udp        0      0 0.0.0.0:514             0.0.0.0:*          11264/rsyslogd 
      

      We enabled the debug syslog in observium, and we see the logs are been processed:

       

      But no information in the web interface it's been showed:

      I uploaded the config.php for validation (replacing ***** with sensitive information).

      As before, any suggestions or clues to point at, it will be appreciated.

      Thanks.

      Attachments

        1. debug.log.png
          debug.log.png
          233 kB
        2. port514.png
          port514.png
          57 kB
        3. config.php
          4 kB
        4. websyslog.png
          websyslog.png
          25 kB
        5. debug.log
          18 kB
        6. websyslogOK.png
          websyslogOK.png
          183 kB
        7. newsyslog.png
          newsyslog.png
          103 kB

        Issue Links

          Activity

            [OBS-2690] Syslog in Observium not working, No syslog entries found!
            landy Mike Stupalov made changes -
            Issue Type Original: Task [ 3 ] New: Help [ 10200 ]
            sonia.lee Sonia Lee made changes -
            Link New: This issue is mentioned by OBS-2891 [ OBS-2891 ]
            landy Mike Stupalov made changes -
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            emiliomejias Emilio MEJIAS made changes -
            Attachment Original: newsyslog.png [ 15044 ]

            Hello Mike,

            Version r9262 works perfect.

            Do you know how we can delete or re-process the old syslogs with '||<Warn', '||<Info', etc..?

            Thanks.

             

            emiliomejias Emilio MEJIAS added a comment - Hello Mike, Version r9262 works perfect. Do you know how we can delete or re-process the old syslogs with '||<Warn', '||<Info', etc..? Thanks.  
            emiliomejias Emilio MEJIAS made changes -
            Attachment New: newsyslog.png [ 15045 ]
            emiliomejias Emilio MEJIAS made changes -
            Attachment New: newsyslog.png [ 15044 ]
            landy Mike Stupalov made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Pending Response [ 10000 ] New: Resolved [ 5 ]

            Syslog messages parsing improved in r9262.

            landy Mike Stupalov added a comment - Syslog messages parsing improved in r9262.

            Tnx for debug.

            Incorrect "progra' is part of syslog entry with '||<Warn', '||<Info', etc..

            landy Mike Stupalov added a comment - Tnx for debug. Incorrect "progra' is part of syslog entry with '||<Warn', '||<Info', etc..

            People

              landy Mike Stupalov
              emiliomejias Emilio MEJIAS
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: