centos7 安装配置rsyslog + LogAnalyzer + mysql

https://www.cnblogs.com/mchina/p/linux-centos-rsyslog-loganalyzer-mysql-log-server.html

安装LNMP

一键安装包：https://lnmp.org/download.html

下载稳定版

nginx 1.12.2 + PHP5.5.38 + mysql 5.7.18

nginx配置：

cat loganalyzer.conf

server {
        listen 80;
        #listen [::]:80 default_server ipv6only=on;
        server_name localhost;
        index index.html index.htm index.php;
        root  /var/webroot/loganalyzer;

        include enable-php.conf;

        location ~ /\. {
            deny all;
        }

        access_log  /data/log/loganalyzer.access.log;
}

cat enable-php.conf
        location ~ [^/]\.php(/|$)
        {
            try_files $uri =404;
            fastcgi_pass  unix:/tmp/php-cgi.sock;
            fastcgi_index index.php;
            include fastcgi.conf;
        }

显示IP

rsyslog 终端弹出消息 Message from syslogd@p172-16-9-14.tdvm.com at Jan 16 13:59:34 ...

解决方法：删除edac模块，是在开机前将外在的usb光驱拔掉引起的

先停止syslog：

systemctl stop rsyslog

lsmod | grep edac  # 是否有以下两个模块

sb_edac                32018     0
    edac_core             58151     1   sb_edac

把/etc/rsyslog/conf OmitLocalLogging 改成如下值

$OmitLocalLogging off

rmmod sb_eda
rmmod edac_core

再开启rsyslog

systemctl start rsyslog

添加字段提示：Field 'Sortable' doesn't have a default value

解决方法：在/etc/my.conf的 [mysqld] 块中添加下面这行

sql-mode="NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

ESXi 设置 syslog

防火墙开放syslog端口

Dell iDrac设置远程syslog