搭建syslog服务器流程

1、安装系统安装要求PC配置：CPU：Intel P E2160（1.8GHz）以上内存：1G以上硬盘：80G以上虚拟机要求：Kernel：linux 2.6内存：512以上硬盘：40G以上安装系统Linux syslog server要求用centos 5.5下载地址：ed2k:/|file|CentOS.5.5.32bit光盘镜像.CentOS-5.5-i386-bin-DVD.iso|4185118720|a1ce64b6d36d945f562cb1250d8d665f|h=fnfai2pqdbdxmz5i5wshkaj22ttscbkg|/配置网络点击桌面上方的系统管理网络，配置eth0和

2、DNSNetwork Abapter修改为桥接模式安装工具安装GCC和makerootFDWIN # yum install gcc make安装LAMP平台rootFDWIN # yum install php-mysql mysql mysql-server php-snmp php-pdo perl-DBDMySQL httpd php yrootFDWIN # service mysqld startrootFDWIN # chkconfig mysqld onrootFDWIN #service httpd startrootFDWIN #chkconfig httpd onroot

3、FDWIN # mysqladmin -uroot password 000000rootFDWIN #vim /var/www/html/index.php添加：然后网页访问下出现OK说明没问题了。进入centos的DVD盘然后安装rpm -vih php-gd-5.1.6-15.el5.i386.rpm进入centos的DVD盘然后安装rpm -ivh freetype-2.2.1-19.el5.i386.rpm安装NET-SNMP1. 下载net-snmp源码，并解压rootFDWIN proc#wget /project/net-snmp/netsnmp/5.6/net-snmp-5.

4、6.tar.gzrootFDWIN proc#tar -xvzf net-snmp-5.6.tar.gz2. Configurea) 进入源文件目录rootFDWIN proc#cd net-snmp-5.6b) ConfigurerootFDWIN proc#./configure -prefix=/usr/local/net-snmp enable-mfd-rewrites-with-default-snmp-version=”2” -with-persistent-directory=”/var/net-snmp”3. 编译、安装rootFDWIN proc#make & make in

5、stall4. 配置snmpd.confa) 将EXAMPLE.conf文件复制到/usr/local/net-snmp/share/snmp/snmpd.confrootFDWIN proc#cp EXAMPLE.conf /usr/local/net-snmp/share/snmp/snmpd.confb) 修改snmpd.conf1.查找以下字段：# source communitycom2sec notConfigUser default public将comunity字段改为你要设置的密码.比如bizcnpublic.将“default”改为你想哪台机器可以看到你的snmp信息,如0

6、。授权服务器IP2.查找以下字段：# Finally, grant the group read-only access to the systemview view.# group context sec.model sec.level prefix read write notifaccess notConfigGroup any noauth exact systemview none none将read字段改为all.代码:#access notConfigGroup any noauth exact all none none3.查找以下字段：# incl/excl subtree

7、mask#view all included .1 80将该行前面的#去掉.4.查找以下字段：#name incl/excl subtree mask(optional)添加一行view all included .1变成#name incl/excl subtree mask(optional)view all included .15.查找以下字段：#view mib2 included .ernet.mgmt.mib-2 fc将该行前面的#去掉.保存、关闭c) 设置net-snmp自启动rootFDWIN proc#chkconfig -level 35 snmpd onrootFDWI

8、N proc#chkconfig -add snmpdd) SNMP测试（本机）rootFDWIN proc#snmpwalk -v -2c -c public FDWIN若有大量数据返回，说明SNMP配置正确e) 防火墙打开udp 161端口f) 检查SNMP服务是否运行rootFDWIN proc#netstat -ln |grep 161udp 0 0 :161 :* 表示SNMP已运行正常CACTI安装a) RRDtool的安装1.cgilibwget /source/cgilib-0.5.tar.gztar -zxvf cgilib-0.5.tar.gzcd cgilib-0.5ma

9、kecp libcgi.a /usr/local/libcp cgi.h /usr/include2.fontconfigwget /release/fontconfig-2.8.0.tar.gzcd fontconfig-2.8.0./configuremake & make install3.pixmanwget /releases/pixman-0.21.2.tar.gzcd pixman-0.21.2./configuremake;make install4.cairowget /releases/cairo-1.10.0.tar.gztar -zxvf cairo-1.10.0.ta

10、r.gzcd cairo-1.10.0export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:$PKG_CONFIG_PATH #这里很重要./configuremake;make install5.pangowget /pub/gnome/sources/pango/1.17/pango-1.17.5.tar.gztar -zxvf pango-1.17.5.tar.gzcd pango-1.17.5./configuremake & make install6.rrdtoolwget /rrdtool/pub/rrdtool-1.4.4.tar.gz

11、tar -xvzf rrdtool-1.4.4.tar.gzcd rrdtool-1.4.4./configure prefix=/usr/local/rrdtoolmake;make isntallb) Cacti的安装1.下载Cacti软件包，并安装到/var/www/html/cactiwget /downloads/cacti-0.8.7g.tar.gztar -xvzf cacti-0.8.7g.tar.gzmv cacti-0.8.7g /var/www/html/cacti2.配置数据库mysql -u root -p 123456mysql create database ca

12、cti;mysql grant all privileges on cacti.* to cactiFDWIN identified by cactiwith grant option;mysql grant all privileges on cacti.* to cacti identified by cactiwith grant option;mysqlflush privileges;mysql use cacti;mysql source /var/www/html/cacti/cacti.sql;3.配置Cacti以连接数据库vi /var/www/html/cacti/incl

13、ude/config.php 依照如下修改：/* make sure these values refect your actual database/host/user/password */$database_type = mysql;$database_default = cacti;$database_hostname = FDWIN;$database_username = cacti;$database_password = cacti;$database_port = 3306;vi /var/www/html/cacti/include/global.php 依照如下修改：/*

14、 Default database settings*/$database_type = mysql;$database_default = cacti;$database_hostname = FDWIN;$database_username = cacti;$database_password = cacti;$database_port = 3306;$configurl_path = /cacti/;4.添加cacti用户rootFDWIN proc#useradd -s nologin cactirootFDWIN proc#passwd cacti5.修改cacti目录属主root

15、FDWIN proc#chown -R cacti:cacti /var/www/html/cacti/6.编辑crontabrootFDWIN proc#crontab -e*/5 * * * * /usr/bin/php /var/www/html/cacti/poller.php /dev/null 2&17.关闭SELinuxrootFDWIN proc#setenforce 08.用浏览器访问http:/FDWIN/cacti/9.配置Cacti首先点开settings的path页，正确设置相应的路径，然后finish保存10.安装补丁按照C上的步骤，打上补丁程序必须在Cacti的安

16、装目录下，即/var/www/html/cacti/rootFDWIN proc#wget /downloads/patches/0.8.7g/data_source_deactivate.patchrootFDWIN proc#wget /downloads/patches/0.8.7g/graph_list_view.patchrootFDWIN proc#wget /downloads/patches/0.8.7g/html_output.patchrootFDWIN proc#wget /downloads/patches/0.8.7g/ldap_group_authenication

17、.patchrootFDWIN proc#wget/downloads/patches/0.8.7g/script_server_command_line_parse.patchrootFDWIN proc#wget /downloads/patches/0.8.7g/ping.patchrootFDWIN proc#wget /downloads/patches/0.8.7g/poller_interval.patchrootFDWIN proc#patch -p1 -N data_source_deactivate.patchpatch -p1 -N graph_list_view.pat

18、chpatch -p1 -N html_output.patchpatch -p1 -N ldap_group_authenication.patchpatch -p1 -N script_server_command_line_parse.patchpatch -p1 -N ping.patchpatch -p1 -N poller_interval.patchCACTI的配置和插件必须现安装好插件扩展PIA 2.8，才能安装、使用其他插件wget /downloads/plugins/cacti-plugin-0.8.7g-PA-v2.8.tar.gztar -xvzf cacti-plu

19、gin-0.8.7g-PA-v2.8.tar.gzmv cacti-plugin-arch /var/www/html/cacti/cd /var/www/html/cacti/mysql -u root -p 123456 cacti cacti-plugin-arch/pa.sqlpatch -p1 -N admin or other user - Realm Permissions - PluginManagement - 打勾并保存3. 安装插件a)下载插件wget /downloads/settings.tar.gzwget /downloads/monitor.tar.gzwget

20、 /downloads/realtime.tar.gzwget /downloads/syslog.tar.gzwget /downloads/thold.tar.gzwget /downloads/tools.tar.gzwget /downloads/update.tar.gzwget /project/cacti-reportit/cactireportit/reportit_v061/reportit_v061.tar.gzwget /downloads/npc-2.0.4.tar.gzb)解压插件tar -xvzf settings.tar.gztar -xvzf monitor.t

21、ar.gztar -xvzf realtime.tar.gztar -xvzf syslog.tar.gztar -xvzf thold.tar.gztar -xvzf tools.tar.gztar -xvzf update.tar.gztar -xvzf reportit_v06.tar.gztar -xvzf npc-2.0.4.tar.gzc)修改global.php，增加插件说明vi /var/www/html/cacti/include/global.php$plugins = settings;$plugins = thold;$plugins = npc;$plugins =

22、syslog;$plugins = aggregate;$plugins = reportit;$plugins = update;$plugins = tools;d)下载安装json（NPC插件需要json支持）wget /get/json-1.2.1.tgztar -xvzf json-1.2.1.tgz/usr/bin/phpize # 如果phpize 没有此指令，请yum安装php-devel包./configuremake & make installe) 修改权限将所有插件mv到/var/www/html/cacti/plugins目录下，然后User Management -

23、 adminor other user - Realm Permissions - Plugin Management - 打勾并保存f) 启用插件点击configuration下的plugins management,将各个插件install/enable。4. 插件安装排错a）realtime插件安装问题realtim插件安装好后，点击web界面的graphs页，选一个图，可发现在其右下角已经出现了一个realtime的logo，但当点此logo进行realtime查看时，会发现弹出的窗口中显示：“The image cache directory doesnt exist.Please

24、create it and set permissionsand then attempt to open an other realtime graph.”提示没有Cache目录以及权限等。解决方案：rootlocalhost proc#makedir /var/www/html/cacti/cacherootlocalhost proc#chmod 777 -R /var/www/html/cacti/cache之后，还要进入console-configuration-settings-misc,设置”Cache Directory”为/var/www/html/cacti/cache/b

25、) Syslog插件安装问题在cacti中访问syslog栏目是会出现以下提示：1 Warning: include(./include/html/inc_timespan_settings.php) function.include:failed to open stream: No such file or directory in/var/www/html/plugins/syslog/syslog.php on line 1262 Warning: include() function.include: Failed opening./include/html/inc_timespan

26、_settings.php for inclusion(include_path=.:/usr/share/pear) in /var/www/html/plugins/syslog/syslog.php online 126只需将/plugins/syslog/syslog.php的第126行#include($syslog_configgraphtime ? ./include/html/inc_timespan_settings.php: plugins/syslog/html/syslog_timespan_settings.php);修改为：#include($syslog_conf

27、iggraphtime ?./lib/timespan_settings.phpplugins/syslog/html/syslog_timespan_settings.php);即可搭建SYSLOG 日常的Linux服务器都会安装syslogd或者rsyslog等日志监控服务。不过，由于日志文件都已文本形式放到服务器上，一个一个的去查找还是比较麻烦的。不过使用cacti可以为我们找到一条捷径。1. 安装syslog-ng服务Syslog-ng，下一代syslog服务。Cacti的syslog监控插件只支持这一种日志服务。rootFDWIN proc#yum install syslog-ng

28、2. 配置syslog插件rootFDWIN proc#cd /var/www/html/cacti/plugins/syslog/rootFDWIN proc#vi config.php$syslogdb_type = mysql;$syslogdb_default = syslog;$syslogdb_hostname = FDWIN;$syslogdb_username = ;$syslogdb_password = ;3. 配置数据库rootFDWIN proc#mysql -u root -p 123456mysqlcreate database syslog;mysqlgrant

29、all on syslog.* to cactiloaclhost;mysqlflush privileges;mysqlexit;mysql ucacti p syslog syslog.sql4. 配置syslog-ng.confvi /etc/syslog-ng/syslog-ng.confversion: 3.0options keep_hostname(yes);long_hostnames(off);flush_lines(1);log_fifo_size(1024);create_dirs(yes); # if a dir does not exist create itowner(root); # owner of created filesgroup(root); # group of created filesperm(0600); # permissions of created filesdir_perm(0700); # permissions of created dirs;source n