搭建syslog服务器流程_百度文库

1、1. 安装系统a 安装要求i. PC配置：CPU：Intel P E2160（1.8GHz）以上内存：1G以上硬盘：80G以上虚拟机要求：Kernel：linux 2.6内存：512以上硬盘：40G以上b 安装系统i. Linux syslog server要求用centos 5.5下载地址：CentOS-5.5-i386-bin-DVD.iso|4185118720|a1ce64b6d36d945f562cb1250d8d665f|h=fnfai2pqdbdxmz5i5wshkaj22ttscbkg|/c 配置网络i. 点击桌面上方的系统管理网络，配置eth0和DNSii. Network

2、Abapter修改为桥接模式2. 安装工具a 安装GCC和makerootFDWIN # yum install gcc makeb 安装LAMP平台rootFDWIN # yum install php-mysql mysql mysql-server php-snmp php-pdo perl-DBDMySQL httpd php yrootFDWIN # service mysqld startrootFDWIN # chkconfig mysqld onrootFDWIN #service httpd startrootFDWIN #chkconfig httpd onrootFDWI

3、N # mysqladmin -uroot password '000000'rootFDWIN #vim /var/www/html/index.php添加：$link=mysql_connect("localhost","root","000000"if(!$link echo "FAILD!"else echo "OK!"?>然后网页访问下出现OK说明没问题了。c 安装NET-SNMP1. 下载net-snmp源码，并解压rootFDWIN proc#2. Confi

4、gurea 进入源文件目录rootFDWIN proc#cd net-snmp-5.6b ConfigurerootFDWIN proc#./configure -prefix=/usr/local/net-snmp enable-mfd-rewrites-with-default-snmp-version=”2” -with-persistent-directory=”/var/net-snmp”3. 编译、安装rootFDWIN proc#make && make install4. 配置snmpd.confa 将EXAMPLE.conf文件复制到/usr/local/ne

5、t-snmp/share/snmp/snmpd.confrootFDWIN proc#cp EXAMPLE.conf /usr/local/net-snmp/share/snmp/snmpd.confb 修改snmpd.conf1.查找以下字段：# source communitycom2sec notConfigUser default public将"comunity"字段改为你要设置的密码.比如"bizcnpublic".2.查找以下字段：# Finally, grant the group read-only access to

6、 the systemview view.# group context sec.model sec.level prefix read write notifaccess notConfigGroup "" any noauth exact systemview none none将"read"字段改为all.代码:#access notConfigGroup "" any noauth exact all none none3.查找以下字段：# incl/excl subtree mask#view all included .1

7、 80将该行前面的"#"去掉.4.查找以下字段：#name incl/excl subtree mask(optional添加一行view all included .1变成#name incl/excl subtree mask(optionalview all included .15.查找以下字段：将该行前面的"#"去掉.保存、关闭c 设置net-snmp自启动rootFDWIN proc#chkconfig -level 35 snmpd onrootFDWIN proc#chkconfig -add snmpdd SNMP测试（本机）rootF

8、DWIN proc#snmpwalk -v -2c -c public FDWIN若有大量数据返回，说明SNMP配置正确e 防火墙打开udp 161端口f 检查SNMP服务是否运行rootFDWIN proc#netstat -ln |grep 1613. CACTI安装a RRDtool的安装1.cgilibcd cgilib-0.5makecp libcgi.a /usr/local/libcp cgi.h /usr/include2.fontconfig./configuremake && make install3.pixman./configuremake;make

9、install4.cairoexport PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:$PKG_CONFIG_PATH #这里很重要./configuremake;make install5.pango./configuremake && make install6.rrdtool./configure prefix=/usr/local/rrdtoolmake;make isntallb Cacti的安装1.下载Cacti软件包，并安装到/var/www/html/cacti2.配置数据库mysql -u root -p 123456my

10、sql> create database cacti;mysql> grant all privileges on cacti.* to cactiFDWIN identified by 'cacti'with grant option;with grant option;mysql>flush privileges;mysql> use cacti;mysql> source /var/www/html/cacti/cacti.sql;3.配置Cacti以连接数据库vi /var/www/html/cacti/include/config.php

11、 依照如下修改：/* make sure these values refect your actual database/host/user/password */$database_type = "mysql"$database_default = "cacti"$database_hostname = "FDWIN"$database_username = "cacti"$database_password = "cacti"$database_port = "3306"

12、;vi /var/www/html/cacti/include/global.php 依照如下修改：/* Default database settings*/$database_type = "mysql"$database_default = "cacti"$database_hostname = "FDWIN"$database_username = "cacti"$database_password = "cacti"$database_port = "3306"$c

13、onfig'url_path' = '/cacti/'4.添加cacti用户rootFDWIN proc#useradd -s nologin cactirootFDWIN proc#passwd cacti5.修改cacti目录属主rootFDWIN proc#chown -R cacti:cacti /var/www/html/cacti/6.编辑crontabrootFDWIN proc#crontab -e*/5 * * * * /usr/bin/php /var/www/html/cacti/poller.php > /dev/null 2>

14、;&17.关闭SELinuxrootFDWIN proc#setenforce 08.用浏览器访问http:/FDWIN/cacti/9.配置Cacti首先点开settings的path页，正确设置相应的路径，然后finish保存10.安装补丁按照C上的步骤，打上补丁程序必须在Cacti的安装目录下，即/var/www/html/cacti/rootFDWIN proc#rootFDWIN proc#rootFDWIN proc#rootFDWIN proc#rootFDWIN proc#wgetrootFDWIN proc#rootFDWIN proc#rootFDWIN proc#

15、patch -p1 -N < data_source_deactivate.patchpatch -p1 -N < graph_list_view.patchpatch -p1 -N < html_output.patchpatch -p1 -N < ldap_group_authenication.patchpatch -p1 -N < script_server_command_line_parse.patchpatch -p1 -N < ping.patchpatch -p1 -N < poller_interval.patch4. CACTI的

16、配置和插件必须现安装好插件扩展PIA 2.8，才能安装、使用其他插件mv cacti-plugin-arch /var/www/html/cacti/cd /var/www/html/cacti/mysql -u root -p 123456 cacti < cacti-plugin-arch/pa.sqlrm -rf cacti-plugin-archchown -R cacti:cacti /var/www/html/cacti1. 修改global.php,设定数据库的相关参数，以及config路径.vi /var/www/html/cacti/include/global.php

17、,修改并增加如下内容：/* Default database settings*/$database_type = "mysql"$database_default = "cacti"$database_hostname = "localhost"$database_username = "cacti"$database_password = "cacti"$database_port = "3306"$config'url_path' = '/cac

18、ti/'$plugins = array(;2. 修改Cacti用户权限，增加插件使用权限显示 Plugin-ManagementUser Management -> "admin" or "other user" -> "Realm Permissions" -> "PluginManagement" -> 打勾并保存3. 安装插件a下载插件b解压插件c修改global.php，增加插件说明vi /var/www/html/cacti/include/global.php$plug

19、ins = 'settings'$plugins = 'thold'$plugins = 'npc'$plugins = 'syslog'$plugins = 'aggregate'$plugins = 'reportit'$plugins = 'update'$plugins = 'tools'd下载安装json（NPC插件需要json支持）/usr/bin/phpize # 如果phpize 没有此指令，请yum安装php-devel包./configuremak

20、e && make installe 修改权限将所有插件mv到/var/www/html/cacti/plugins目录下，然后User Management -> "admin"or "other user" -> "Realm Permissions" -> "Plugin Management" -> 打勾并保存f 启用插件点击configuration下的plugins management,将各个插件install/enable。4. 插件安装排错a）realtim

21、e插件安装问题realtim插件安装好后，点击web界面的graphs页，选一个图，可发现在其右下角已经出现了一个realtime的logo，但当点此logo进行realtime查看时，会发现弹出的窗口中显示：“The image cache directory doesn't exist.Please create it and set permissionsand then attempt to open an other realtime graph.”提示没有Cache目录以及权限等。解决方案：rootlocalhost proc#makedir /var/www/html/c

22、acti/cacherootlocalhost proc#chmod 777 -R /var/www/html/cacti/cache之后，还要进入console->configuration->settings->misc,设置”Cache Directory”为/var/www/html/cacti/cache/b Syslog插件安装问题在cacti中访问syslog栏目是会出现以下提示：1 Warning: include(./include/html/inc_timespan_settings.php function.include:failed to open

23、stream: No such file or directory in/var/www/html/plugins/syslog/syslog.php on line 1262 Warning: include( function.include: Failed opening'./include/html/inc_timespan_settings.php' for inclusion(include_path='.:/usr/share/pear' in /var/www/html/plugins/syslog/syslog.php online 126只需

24、将/plugins/syslog/syslog.php的第126行#include($syslog_config"graphtime" ? "./include/html/inc_timespan_settings.php": "plugins/syslog/html/syslog_timespan_settings.php"修改为：#include($syslog_config"graphtime" ?"./lib/timespan_settings.php plugins/syslog/html/sy

25、slog_timespan_setti ngs.php"即可5. 搭建SYSLOG 日常的Linux服务器都会安装syslogd或者rsyslog等日志监控服务。不过，由于日志文件都已文本形式放到服务器上，一个一个的去查找还是比较麻烦的。不过使用cacti可以为我们找到一条捷径。1. 安装syslog-ng服务Syslog-ng，下一代syslog服务。Cacti的syslog监控插件只支持这一种日志服务。rootFDWIN proc#yum install syslog-ng2. 配置syslog插件rootFDWIN proc#cd /var/www/html/cacti/plu

26、gins/syslog/rootFDWIN proc#vi config.php$syslogdb_type = 'mysql'$syslogdb_default = 'syslog'$syslogdb_hostname = 'FDWIN'$syslogdb_username = ' ' $syslogdb_password = ' ' 3. 配置数据库rootFDWIN proc#mysql -u root -p 123456mysql>create database syslog;mysql>gra

27、nt all on syslog.* to cactiloaclhost;mysql>flush privileges;mysql>exit;mysql ucacti p syslog < syslog.sql4. 配置syslog-ng.confvi /etc/syslog-ng/syslog-ng.confversion: 3.0options keep_hostname(yes;long_hostnames(off;flush_lines(1;log_fifo_size(1024;create_dirs(yes; # if a dir does not exist cr

28、eate itowner(root; # owner of created filesgroup(root; # group of created filesperm(0600; # permissions of created filesdir_perm(0700; # permissions of created dirs;source net udp(;destination d_mysql pipe("/tmp/mysql.pipe"template("INSERT INTO cacti.syslog_incoming (host, facility, priority, date,time, message VALUES ( '$HO