Comments on: Logging syslog and database audit messages to an oracle database with rsyslog

By: Boris Girsch

Boris Girsch — Thu, 17 Nov 2011 11:06:55 +0000

Hey with some dirty hacks you can use phplogcon to display the content of the table in the oracle database

http://kb.monitorware.com/loganalyzer-rsyslog-oracle-t11256.html

Regards

Boris Girsch

By: Ronny Egner

Ronny Egner — Fri, 28 Oct 2011 08:26:52 +0000

Hi,

try setting LD_LIBRARY_PATH to the path were your OCI libraries are located.

By: raiza

raiza — Fri, 28 Oct 2011 08:23:35 +0000

i got an error in /var/log/syslog: syslog-rsyslogd-2066: could not load module ‘/usr/local/lib/rsyslog/omoracle.so’, dlopen: /usr/local/lib/rsyslog/omoracle.so: undefined symbol: OCIAttrSet
I’m using rsyslog-5.8.4 with oracle instantclient 10.2
ORACLE_LIB_PATH=/usr/local/instantclient_10_2
ORACLE_INCLUDE_PATH=/usr/local/instantclient_10_2/sdk/include

./configure –enable-oracle

Can someone help please?

By: Oracle Blogg – jcon.no - Parameter: AUDIT_SYSLOG_LEVEL

Oracle Blogg – jcon.no - Parameter: AUDIT_SYSLOG_LEVEL — Sat, 26 Mar 2011 23:33:34 +0000

[...] Logging syslog and database audit messages to an oracle database with rsyslog [...]

By: Ronny Egner

Ronny Egner — Wed, 21 Jul 2010 06:01:32 +0000

Sorry. No idea. What version (both database and rsyslog) are you using?

By: foobar

foobar — Wed, 14 Jul 2010 08:00:31 +0000

Hello, I followed your notes to setup rsyslog and omoracle. But even with a test db and two columns it won’t work, see: “rsyslogd: Error message: ORA-01461: can bind a LONG value only for insert into a LONG column”.

I created the table as follows:
create table test (hostname varchar2(100), message varchar2(4000));

… and found out that if I am only writing one syslog property to oracle it succeeds.

My test configuration:

$ModLoad omoracle
$OmoracleDBUser myoracleuser
$OmoracleDBPassword *****
$OmoracleDB myoracledb
$OmoracleBatchSize 1
$OmoracleBatchItemSize 4096
$OmoracleStatementTemplate OmoracleStatement

$template OmoracleStatement,”INSERT INTO TEST(hostname,message) VALUES(:hostname,:msg)”
$template TestStmt,”%hostname%%msg%”

*.* :omoracle:;TestStmt

Any idea what might cause this?

By: Ronny Egner

Ronny Egner — Wed, 25 Nov 2009 15:15:52 +0000

Why do you want to be a moderator here?

By: Poonounerve

Poonounerve — Wed, 25 Nov 2009 03:33:04 +0000

Could not find a suitable section so I written here, how to become a moderator for your forum, that need for this?

By: Vega

Vega — Wed, 18 Nov 2009 07:10:08 +0000

Hi Ronny

U r amazing.

By: Dave @ Data acquisition

Dave @ Data acquisition — Wed, 18 Nov 2009 05:19:36 +0000

That’s a very big and detailed walkthrough! I’m currently working with oracle at university and its a bear to handle at times, but this stuff you showed here certainly makes the logging side of it a lot easier to digest.