russell-io/php-syslog-ng

Automatically exported from code.google.com/p/php-syslog-ng

php-syslog-ng's Issues

getting error while trying to access the url http://myserver/ - Parse error: syntax error common_funcs.php on line 600

What steps will reproduce the problem?
1. After successful installation of php-syslog-ng through web interface 
and trying to access the server URL


What is the expected output? What do you see instead?

I need to see the home page of php-syslog-ng. But instead i see the 
error "Parse error: syntax error, unexpected $end 
in /usr/local/apache2/htdocs/includes/common_funcs.php on line 600"



What version of the product are you using? On what operating system?
2.9.2a(r14) on Fedora core3

Please provide any additional information below.
I am using fedora core3 linux, running php 5.1.4, mysql 4.19 and  
Apache/2.0.52. I have also added support for libjpeg, libpng & gd with PHP.
Moreover, i was getting the home page before re-compiling PHP with 
libjpeg,libpng,freetype2 and gd support.

Original issue reported on code.google.com by [email protected] on 26 Apr 2007 at 1:40

Display the cemdb msg if necessary

Please provide any additional information below.

This is not actually a bug, there are two things that this patch does.

One check the msg line to match %[:alpha:].*: if that is true then a msg
for the cembd explanation should be displayed, if there isn't a match then
nothing is displayed.

The other thing is change the "a" html tag to div so you can mouse over the
text on any part of the message and mark & copy easily.

Cheers,
Sergio

Original issue reported on code.google.com by [email protected] on 10 Aug 2007 at 7:31

Attachments:

• cemdb-display.patch

Missing default accounts

What steps will reproduce the problem?
1. Installed via Web Interface - failed.
2. Deleted all MySQL Tables, manually created them per the included "sql"
scripts.
3. No default accounts created, cannot log into the web front-end
4. all logging is seen in the Database via "SELECT * from LOGS", etc.
5. Trying to insert users into the table but no luck

What is the expected output? What do you see instead?
I'd like to log into my new install, old 2.8 PHP Syslog worked great.

What version of the product are you using? On what operating system?
2.9.3 on Fedora 6 and MySQL 5.0.27

Please provide any additional information below.
If someone could post an "addusers.sql" script to help us sql-challenged it
would be greatly appreciated!!

Original issue reported on code.google.com by [email protected] on 30 May 2007 at 6:38

PHP Notices in Apache error log files

What steps will reproduce the problem?

1. Install php-syslog-ng-2.9.3e
2. Log in, search for logs, create graphs

What is the expected output? What do you see instead?

When searching for logs or creating graphs, result is displayed but with 2
PHP notice messages complaining about undefined variables. What is the impact ?

Errors are also recorded in Apache error log files (see bellow).
Also 2 other error messages in Apache log files when logging in.

What version of the product are you using? On what operating system?

php-syslog-ng-2.9.3e
Redhat FC4 2.6.11-1.1369
httpd-2.0.54-10.4
php-5.0.4-10.5

Please provide any additional information below.

Errors when logging to php-syslog-ng :

PHP Notice:  Use of undefined constant JS - assumed 'JS' in
/var/www/phpsyslogng-2.9.3e/html/includes/login.php on line 110, referer:
http://[myserver]/phpsyslogng/
PHP Notice:  Undefined index:  HTTPS in
/var/www/phpsyslogng-2.9.3e/html/includes/common_funcs.php on line 398,
referer: http://[myserver]/phpsyslogng/

Errors when searching logs :

PHP Notice:  Undefined variable: msg1 in
/var/www/phpsyslogng-2.9.3e/html/includes/regularresult.php on line 279,
referer: http://bunker-syslog/phpsyslogng/index.php?pageId=searchform
PHP Notice:  Undefined variable: result_array in
/var/www/phpsyslogng-2.9.3e/html/includes/regularresult.php on line 360,
referer: http://bunker-syslog/phpsyslogng/index.php?pageId=searchform

Errors when creating a graph :

PHP Notice:  Constant USE_CACHE already defined in
/var/www/phpsyslogng-2.9.3e/html/includes/jpgraph/jpg-config.inc on line
115, referer: http://[myserver]/phpsyslogng/index.php?pageId=searchform

PHP Notice:  Undefined variable: msg1 in
/var/www/phpsyslogng-2.9.3e/html/includes/graphit.php on line 300, referer:
http://[myserver]/phpsyslogng/index.php?pageId=searchform

PHP Notice:  Undefined variable: alts in
/var/www/phpsyslogng-2.9.3e/html/includes/graphit.php on line 494, referer:
http://[myserver]/phpsyslogng/index.php?pageId=searchform

Original issue reported on code.google.com by [email protected] on 10 Aug 2007 at 2:59

Individual date tables contain previous days data

What steps will reproduce the problem?
1. Search of an individual date table gives previous day's data
2.
3.

What is the expected output? What do you see instead?
The correct day's data

What version of the product are you using? On what operating system?
2.3.9f

Please provide any additional information below.
I was able to fix this by adding a variable $yesterday and replacing the
two references to $today with $yesterday in 'logrotate.php' (this was a
problem because I rotate the logs at midnight every day).

$yesterday = date("Ymd", strtotime("-1 days"));

note: don't forget to rename the individual tables and recreate the merge
logs table (all_logs) before you implement.

Original issue reported on code.google.com by [email protected] on 24 Aug 2007 at 9:32

Suggestion to help along searches

Is there a way we can change the and to an and | or or make it selectable
so you can include more than one criteria when searching ?

Original issue reported on code.google.com by [email protected] on 20 Oct 2006 at 2:45

Table prefix not honoured at installation

What steps will reproduce the problem?
1. Do a fresh install (without previous DB)
2. Enter a non-empty DB table-prefix in Step 2 of the install wizard

What is the expected output? What do you see instead?
The tables in the DB should be prefixed with the table prefix. But they are
not. Yet phpsyslog-ng remembers the prefix and errors out with a "table
<prefix>_users not found".

What version of the product are you using? On what operating system?
2.9.5d
Linux 2.6.20-hardened

Please provide any additional information below.
Adding the prefix to the table names makes the problem disappear.

Original issue reported on code.google.com by [email protected] on 7 Feb 2008 at 9:35

reloadcache.php: No such file or directory

What steps will reproduce the problem?
1. run => php reloadcache.php

What is the expected output? What do you see instead?
PHP Warning:  require_once(../html/includes/common_funcs.php): failed to
open stream: No such file or directory in
/usr/local/share/php-syslog-ng/scripts/reloadcache.php on line 7
PHP Fatal error:  require_once(): Failed opening required
'../html/includes/common_funcs.php'
(include_path='.:/usr/share/php5:/usr/share/php5/PEAR') in
/usr/local/share/php-syslog-ng/scripts/reloadcache.php on line 7

What version of the product are you using? On what operating system?
2.9.5d
SuSE Linux Enterprise Server 10 SP1

Please provide any additional information below.
The Problem is the variable $basePath. They would overwrite in common_funcs.php

Original issue reported on code.google.com by [email protected] on 26 Feb 2008 at 8:16

suggestion for searching by date and time

It would be usefull (to me and my application) if the time/date area had a 
button for 'last hour' and 'last 24 hours' to auto-fill time/date boxes.

Original issue reported on code.google.com by [email protected] on 27 Nov 2007 at 3:32

Calendar icon disappears after first click

What steps will reproduce the problem?
1. Install php-syslog-ng in a directory (not the default website) i.e. it's
accessed http://server.somedomain.com/php-syslog-ng/ 
2. Click on a calendar icon in the search form.

What is the expected output? What do you see instead?
The expected is the icon change to something different, but instead it
disappears after the first click. 


What version of the product are you using? On what operating system?
2.9.3a on Mandriva Linux 2007.1


Please provide any additional information below.
The problem appears to be the next icon to used (after the click) is
searched in a non existent directory in /images/buttons

Attached is a patch to fix this (not tested with php-syslog-ng is on the
webserver's root yet)

Original issue reported on code.google.com by [email protected] on 10 Jul 2007 at 8:34

Attachments:

• html_header.php.patch

Working with no Authentication is in 2.9.5a not possible

with version php-syslog-ng-2.9.5a and configured

   define('REQUIRE_AUTH', FALSE);
   define('USE_ACL', FALSE);

in config/config.php still the login screen is shown.

In previous versions it is possible to work with no authentication.

Original issue reported on code.google.com by [email protected] on 5 Feb 2008 at 5:12

[deleted issue]

[deleted issue]

Query failed: You have an error in your SQL syntax.

What steps will reproduce the problem?
1. Search --> Tail
2.
3.

What is the expected output? What do you see instead?
Query failed: You have an error in your SQL syntax. Check the manual that 
corresponds to your MySQL server version for the right syntax to use 
near 'select seq from logs FORCE INDEX(PRIMARY) ORDER BY seq DESC LIM

What version of the product are you using? On what operating system?
Php-Syslog-NG 2.9.3l

Please provide any additional information below.
OS: SLES9x86SP3

Original issue reported on code.google.com by [email protected] on 15 Nov 2007 at 7:41

Attachments:

• Query_failed_syntax_error.jpg

User Access Request

Hi
This is an enhancement request. 

Would like to have a featute in PHP-Syslog-ng wherein the list of hosts
visible would be decided by the login credentials.

Or somethins equivalent that would do the job.

From,
Syd

Original issue reported on code.google.com by [email protected] on 31 Aug 2007 at 12:52

MAC address aliases

What steps will reproduce the problem?
Not a problem but a suggestion.

What is the expected output?
I envisage a table that can substitute MAC addresses with verbose descriptions.
The web page would have an option button to toggle the feature on/off.
When MAC is displayed, a tooltip on mouseover showing verbose would be nice.

Thanks for a great product!

Original issue reported on code.google.com by [email protected] on 15 Feb 2008 at 4:22

Display is cut because of parsing error.

What steps will reproduce the problem?
1. Doing a search and getting an entry similar to this ( see screenshot ) : 

Jul 26 2007 15:36:38 sim-nml : %FWSM-5-111008: User '2g456' executed the
'timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00
sip-disconnect 0:02:00' command.


It will not display the message and will stop the output.


The only way i have found to make it work was to remove all ' characters
from the msg but if you look at the screenshot, you will see other entry's
have multiple ' and the output is ok. 

Any clue on how i could resolve this issue ? 


What version of the product are you using? On what operating system?

php-syslog-ng 2.9.3c

SUSE Linux Enterprise Server 10 (x86_64)
VERSION = 10
PATCHLEVEL = 1

Please provide any additional information below.

If any other details are required please ask ! 

Original issue reported on code.google.com by [email protected] on 30 Jul 2007 at 3:05

Attachments:

• screenshot.jpg

logrotate.php error

What steps will reproduce the problem?

1. Set your LOGRETENTION setting within config/config.php to 2
2. Wait 3-4 days, at which point you will no longer be able to use the GUI.
3. Edit /var/lib/mysql/syslog/all_logs.MRG and remove the oldest logsDATE file.
4. GUI now works.


What version of the product are you using? 2.9.2a

On what operating system? Linux/FC5

Please provide any additional information below.

What I've found wrong so far is the following:

1.  all_logs.MRG contains the name of one more table than it should.  For 
instance, my log rotate schedule is currently set to 2, but for some reason 
it keeps tables for 4 days. My all_logs.MRG file ends up looking like this:

logs
logs20060811
logs20060812
logs20060813
logs20060814

when in fact it should look like this (assuming 2 means today + 2 more 
days):

logs
logs20060812
logs20060813
logs20060814

So, if I go in and remove the entry for logs20060811, my GUI works.  I have 
not figured out what portion of the logrotate or merge script keeps the 
additional table, but it seems to be off by one number.

Finally, I do not believe that the logs are actually being rotated because 
whenever I do a search for any data within any of the above tables, i.e. 
logs20060812, I get blank results.  logs, which contains data for all of
the other tables, is the only place that I can search for data.

Original issue reported on code.google.com by [email protected] on 15 Aug 2006 at 12:44

php error in regularresult.php line 460

What steps will reproduce the problem?

1. Perform a regular search

What is the expected output? What do you see instead?
- the search results look good but the apache error log
  contains this error for each row:

[error] PHP Notice:  Undefined offset:  0 in
/var/www/php-syslog-ng/includes/regularresult.php on line 460

What version of the product are you using? On what operating system?
v2.9.2a (r12)

Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 14 Aug 2006 at 4:20

Message Time stamp is not true

What steps will reproduce the problem?
1. Time stamp is not true
2.
3.

What is the expected output? What do you see instead?
hostname syslog 01:00:00 unparseable log message: "TestMessage" 

What version of the product are you using? On what operating system?
PHP-Syslog-NG 2.9.3I from 20-Sep-2007

Please provide any additional information below.
Sles9x86 SP3 Mysql Vers. 5

Original issue reported on code.google.com by [email protected] on 28 Dec 2007 at 2:19

Parse error while attempting to search (unexpected T_STRING...in CEMDB.class)

What steps will reproduce the problem?
1. Install 2.9.3 (current from gdd.net)
2. Start capturing syslog data
3. Perform a search

What is the expected output? What do you see instead?
I expect to see the syslog data - instead I get this error:

Parse error: syntax error, unexpected T_STRING, expecting T_OLD_FUNCTION or
T_FUNCTION or T_VAR or '}' in
/var/www/php-syslog-ng/includes/CEMDB.class.php on line 11

What version of the product are you using? On what operating system?
php-syslog-ng 2.9.3
Slackware 11.0 with 2.6.18 kernel
apache 1.3.37
php 4.4.7
mysql 5.0.37

Please provide any additional information below.
I was able to get this working by converting CEMDB.class.php to php4 format
(see attached).

Does this mean that php-syslog-ng will now require the use of php5 and
apache 2.0 just to handle the CEMDB.class.php module?

Original issue reported on code.google.com by [email protected] on 31 May 2007 at 5:32

Attachments:

• CEMDB.class.php

Logrotate.php probems with mysqld 5.0

What steps will reproduce the problem?
1. On Ubuntu apt-get upgrade. This will install the mysql-server-5.0 package.
2. On existing installs all_logs will be gone and on new installs
logrotate.php error out. with 

Query failed: DROP,ALTER command denied to user 'syslogadmin'@'localhost'
for table 'templogs'
Looks like it does not want to rename the database. 

What is the expected output?
I expect to see a new table each day. 

What do you see instead?
I see now new table and now all_logs. Also I see templogs.

What version of the product are you using? 

php-syslog-ng-2.9.3l.tgz

On what operating system?
DISTRIB_DESCRIPTION="Ubuntu 7.04"
DISTRIB_CODENAME=feisty

Linux ucp-eos 2.6.20-16-server #2 SMP Sun Sep 23 19:57:25 UTC 2007 i686
GNU/Linux

Original issue reported on code.google.com by [email protected] on 1 Nov 2007 at 4:40

collapse identical messages affect number of records per page

What steps will reproduce the problem?
1. enable collapse identical messages 
2. submit query

What is the expected output? 
expect each page to have number of lines specified

What do you see instead?
many pages with few lines per page

What version of the product are you using? On what operating system?
2.9.3f on Debian Lenny

Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 9 Sep 2007 at 10:47

Notice: Use of undefined constant JS

What steps will reproduce the problem?
1. the JS variable is not defined in function g_redirect in common_funcs.php
2.
3.

What is the expected output? What do you see instead?
This is a cosmetic bug since the default switch is to use JS, I'm attaching
a patch file to fix it.

Original issue reported on code.google.com by [email protected] on 5 Sep 2007 at 3:05

Attachments:

• js.patch

Suggestion to make room for more search results

Take the build date/time out of the title and move it to "About".
Remove the realtime date/time.  IMHO people that want to see that probably 
already have it displayed elsewhere (I have mine on the desktop "Panel"). 
Move the viewer's IP from the top right to "About".
Move the "Use this link to reference this query directly:" link to the 
menu bar.
Remove the " The SQL query:" bar and add a link to the menu bar that will 
(a) copy the query text to the clipboard, and (b)display it as bubble help 
when moused over.

Original issue reported on code.google.com by [email protected] on 9 Sep 2007 at 10:43

Access control issues

What steps will reproduce the problem?
1. As admin, change a users access settings
2. Login as the user
3. Access settings are not respected

What is the expected output? What do you see instead?
1. User access settings to be respected

What version of the product are you using? On what operating system?
- v2.9.2a (12)

Please provide any additional information below.
- default access settings seem to override individual settings.

Original issue reported on code.google.com by [email protected] on 4 Aug 2006 at 3:37

Tab stops

What steps will reproduce the problem?
1. Count the number of tabs needed to login

What is the expected output?
3 tabs

What do you see instead?
more than 3 tabs required

What version of the product are you using? On what operating system?
2.9.3f on Debian Lenny w/Iceweasel

Please provide any additional information below.
On the login page, I'm not sure where the default tab stop is.  I don't 
think it is on the "username" field.  Iceweasel remembers my ID and my 
password so I would like to not have to tab too many times or mouse to the 
login button. 

Original issue reported on code.google.com by [email protected] on 9 Sep 2007 at 10:51

Caching for CEM-DB lookups

The attached diff implements an internal cache for Cisco error message DB
lookups and thus improves performance.

The changes will probably be included in the next release (r15).

Comments are welcome.

Original issue reported on code.google.com by [email protected] on 1 May 2007 at 8:52

Attachments:

• caching-cemdb-lookups.diff

dbsetup.sql - dup db create for CEMDB

duplicate stanzas for CEMDB db CREATE  within dbsetup.sql causes failure of
php based auto setup withing install3.php. Removing either set of CEMDB db
CREATE entries fixes it. 

from 'latest' tgz download.

thanks

geoff

Original issue reported on code.google.com by [email protected] on 16 May 2007 at 3:10

Searching 'all_logs' without requiring date range specification

What steps will reproduce the problem?
1. Selecting 'all_logs' requires date selection
2.
3.

What is the expected output? What do you see instead?

Selecting 'all_logs' without date specification performs a search of 'logs'

What version of the product are you using? On what operating system?
2.9.2a (r14)

Please provide any additional information below.

It would be nice if the selection of 'all_logs' did not require a date
range specification but simply searched 'all_logs', not 'logs'.

Original issue reported on code.google.com by [email protected] on 4 May 2007 at 4:45

Messages including a % and containing single quotes results in error

What steps will reproduce the problem?
1.
Generate a message like this:
"pdns[25714]: Received a malformed qdomain from 195.186.1.111,
'marjetka%20fotka.jpg.megasunfitness.ch': dropping"
2.
Results in a MySQL error:
Query failed: You have an error in your SQL syntax; check the manual that
corresponds to your MySQL server version for the right syntax to use near
''%20fotka.jpg.megasunfitness.ch'' LIMIT 1' at line 1

This because single quotes are not escaped.

What version of the product are you using? On what operating system?
- php-syslog-ng-2.9.3l.tgz

Please provide any additional information below.
I added a simple addcslashes to the function "extractName" of the file
"CEMDB.class.php". (patch attached)

Original issue reported on code.google.com by [email protected] on 9 Jan 2008 at 8:52

Attachments:

• mysql_error_patch.patch

Patch to syslog2mysql.sh and config.php

1. Add this to the config.php:

define('MYSQL_BIN', '/usr/local/bin/mysql');
define('MYSQL_FIFO', '/var/log/mysql.pipe');

2.
#!/bin/bash
# If you add this script to cron, be sure to change $config to the full
path name
# ie: /www/php-syslog-ng/html/config/config.php
config="/www/php-syslog-ng/html/config/config.php"

user=`cat $config | grep "'DBADMIN'" | awk -F"'" '{print $4}' `
pw=`cat $config | grep "'DBADMINPW'" | awk -F"'" '{print $4}' `
db=`cat $config | grep "'DBNAME'" | awk -F"'" '{print $4}' `
mysql=`cat $config | grep "'MYSQL_BIN'" | awk -F"'" '{print $4}' `
fifo=`cat $config | grep "'MYSQL_FIFO'" | awk -F"'" '{print $4}' `

sleep 10

if [ ! -p "$fifo" ]
then
        mkfifo "$fifo"
fi
while [ -p "$fifo" ]
do
        $mysql -u $user --password="$pw" $db < "$fifo" >/dev/null 2> /dev/null
        sleep 1
done


---

Why: 
i) if the mysql client isn't found, and this is running out of
crontab...it's kinda bad. Ideally, the above defines could be detected at
install time? :o) 
ii) the sleep 10 gives the OS plenty of time to ensure mysql is actually up
and running before this script attempts to connect...
iii) using -p instead of -e also ensures the file is actually a named pipe.

Thoughts?

Original issue reported on code.google.com by [email protected] on 10 Oct 2007 at 5:10

in version 2.9.3f is a db failur in the logrotate.php

What steps will reproduce the problem?
1. logrotate creates a emty all_logs table
2.
3.

What is the expected output? What do you see instead?
an full all_logs file :-)

What version of the product are you using? On what operating system?
2.9.3f 
System:
Linux monitor 2.6.18.8-0.5-default #1 SMP Fri Jun 22 12:17:53 UTC 2007 i686
i686 i386 GNU/Linux

Please provide any additional information below.

Here ist the patchfile for this:

---
89c87
<       $newStr = "ENGINE=MRG_MyISAM";

---
>       $newStr = "TYPE=MRG_MyISAM";

Original issue reported on code.google.com by [email protected] on 22 Aug 2007 at 8:42

Unable to login, login redirect failing.

Hello,

What would make a once working install of php-syslog-ng stop working with 
authenication?  The following errors are now being generated by apache:

[Tue Sep 11 09:26:39 2007] [error] [client 142.139.3.34] PHP Notice:  Use 
of undefined constant JS - assumed 'JS' in /var/www/www-
syslog/html/includes/login.php on line 110, referer: http://www-
syslog.gnbwan.ca/
[Tue Sep 11 09:26:39 2007] [error] [client 142.139.3.34] PHP Notice:  
Undefined index:  HTTPS in /var/www/www-
syslog/html/includes/common_funcs.php on line 398, referer: http://www-
syslog.gnbwan.ca/

From the user's point of view it just takes them back to the login page 
when they enter their credentials to login...basically a loop.  Everytime 
this happens the above error is generated.  If you turn off Authenication, 
everything else works within php-syslog-ng.

I'm running it on Centos 5.0 and have tried versions 2.9.3i and 2.9.3k 
both of which produce the same login error/issue.

Any ideas?  What can I do to try and debug what is at the heart of this 
issue?

Other than that your app is awesome! :-)

Original issue reported on code.google.com by [email protected] on 11 Sep 2007 at 11:12

Parse error: syntax error, unexpected $end in /noc/htdocs/syslogger/includes/common_funcs.php on line 545

What steps will reproduce the problem?
1. After successful installation of php-syslog-ng 2.9.3f through web
interface and trying to access the server URL.


What is the expected output? What do you see instead?
Parse error: syntax error, unexpected $end in
/noc/htdocs/syslogger/includes/common_funcs.php on line 545


What version of the product are you using? On what operating system?

- PHP-SYSLOG-NG 2.9.3f
1. FreeBSD 6.2
2. Apache/2.2.4 (Unix) PHP/5.2.3 
3. MySQL 5.0.45

This has been an issue with version 2.9.3a and UP

Original issue reported on code.google.com by [email protected] on 14 Aug 2007 at 3:24

Enter one-line summary

What steps will reproduce the problem?
1. Ensure MERGELOGTABLE and LOGROTATERENTION are defined in config/config.php
2. Execute scripts/logrotate.php.
3. Attempt to login to the UI and the error will be produced.

What is the expected output? What do you see instead?

Expected output:

The logs should be rotated based on the LOGROTATERENTION setting in
config/config.php and all appropriate logs and files updated. Once that is
completed, anyone should be able to login to the UI and execute searches.

Actual output due to bug:

logrotate.php generates the following when run manually:

Starting logrotate
2006-08-11 10:40:06
Log rotate ended successfully.
Now optimizing the old logs.
Getting list of log tables.
Searching for tables to drop.
Dropping logs20060512!
Creating merge table.

2006-08-11 10:40:08
All done!

** The dates will obviously differ.

This output looks completely normal until one tries to login to the UI and
then the following error comes up:

Query: "DESCRIBE all_logs" Failed
Can't find file: 'all_logs.MRG' (errno: 2)


What version of the product are you using? On what operating system?

v2.8.1 of php-syslog-ng running on RHEL-ES 4.

Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 14 Aug 2006 at 8:59

logrotate.php error

What steps will reproduce the problem?

1. Set your LOGRETENTION setting within config/config.php to 2
2. Wait 3-4 days, at which point you will no longer be able to use the GUI.
3. Edit /var/lib/mysql/syslog/all_logs.MRG and remove the oldest logsDATE file.
4. GUI now works.


What version of the product are you using? 

2.9.2a

On what operating system? 

Linux/FC5

Please provide any additional information below.

What I've found wrong so far is the following:

1.  all_logs.MRG contains the name of one more table than it should.  For 
instance, my log rotate schedule is currently set to 2, but for some reason 
it keeps tables for 4 days. My all_logs.MRG file ends up looking like this:

logs
logs20060811
logs20060812
logs20060813
logs20060814

when in fact it should look like this (assuming 2 means today + 2 more 
days):

logs
logs20060812
logs20060813
logs20060814

So, if I go in and remove the entry for logs20060811, my GUI works.  I have 
not figured out what portion of the logrotate or merge script keeps the 
additional table, but it seems to be off by one number.

Finally, I do not believe that the logs are actually being rotated because 
whenever I do a search for any data within any of the above tables, i.e. 
logs20060812, I get blank results.  logs, which contains data for all of
the other tables, is the only place that I can search for data.

Original issue reported on code.google.com by [email protected] on 15 Aug 2006 at 12:45

recent_logs

Feature request for another MyISAM_MRG table covering a user-definable
period. As an example, if you defined the period as 96 hours, it'd cover:

    logs + logs20080204 + logs20080203 + logs20080202

Basically this is to 'ease' searching over >24 hour periods without having
to resort to all_logs since that takes about 10 minutes  to return data.

Original issue reported on code.google.com by [email protected] on 5 Feb 2008 at 1:40

CEMDB: Message field contains "ARRAY"

What steps will reproduce the problem?
1. Do a table lookup for SYS-5-CONFIG
2. Messages were inserted as ARRAY(blah) instead of the actual text


What is the expected output? What do you see instead?
A message description

Please use labels and text to provide additional information.
CEMDB

Original issue reported on code.google.com by [email protected] on 9 Nov 2007 at 6:30

Parse error: syntax error, unexpected $end in /www/php-syslog-ng/html/includes/common_funcs.php on line 555

What steps will reproduce the problem?
1. Performing install
2.
3.

What is the expected output? What do you see instead?
View site

What version of the product are you using? On what operating system?
Solaris 9

Please provide any additional information below.

Original issue reported on code.google.com by [email protected] on 4 Oct 2007 at 2:55

Tail output slow.

What steps will reproduce the problem?
1. Tail output of large table (mine is 25gigs, 2.5gigs per day)
2.
3.

What is the expected output? What do you see instead?
correct output, after 170seconds

What version of the product are you using? On what operating system?
2.9.2a, but just checked cvs, and it's still an issue

Please provide any additional information below.

sure, patch tailresult.php with the following near the end of the file.

if($where !="") {
      $query = $query."WHERE ".$where." ORDER BY seq DESC LIMIT ".$limit;
else {
        $query = $query."ORDER BY seq DESC LIMIT ".$limit;
}


and replace the first $query=, with the following:
        $query = $query." JOIN (select seq from ".$srcTable." 
WHERE ".$where." LIMIT ".$limit.") as s USING(seq) ORDER BY seq 
DESC";              
}

using subselects on just primary key is much faster, then select the data 
we need to access from the myisam data file

this probably won't speed up innodb tables, just myisam.

Original issue reported on code.google.com by [email protected] on 3 Aug 2007 at 8:25

Back to search does not remember search criteria

What steps will reproduce the problem?
1. enter a search
2. go back to search

What is the expected output? 
I expect to see prior search criteria

What do you see instead?
blank fields

What version of the product are you using? On what operating system?
2.9.3f on Debian Lenny w/ Iceweasel

Please provide any additional information below.
There is no difference between "Search" on the menu bar and the "Back to 
search" link.  Both take you to a clean slate.  I would like to see 
the "Back to search" repopulate the search fields with the criteria that 
generated the query results.

Original issue reported on code.google.com by [email protected] on 9 Sep 2007 at 10:53

Feature request: custom title for tail queries?

 So, i've got a series of bookmarks that brings up half a dozen tabs of
preset queries. The problem is identifying which tab is which :-)

Here's what I've done with my local installation to allow for each query to
be labelled:

# diff html/index.php html/index.php.backup 
93,98c93
<       if ($_REQUEST['title'] == '') {
<               $addTitle = "TAIL RESULTS";
<       }
<       else {
<               $addTitle = $_REQUEST['title'];
<       }

---
>       $addTitle = "TAIL RESULTS";

# diff html/includes/html_header.php html/includes/html_header.php.backup 
10c10
< <?php echo "<title>".$addTitle.": ".PAGETITLE." ".VERSION."</title>"; ?>

---
> <?php echo "<title>".PAGETITLE." ".VERSION.": ".$addTitle."</title>"; ?>

i'm sure this isn't the best way to do it, since $_REQUEST['title'] isn't
undergoing any sort of sanity checking....but i'm sure you can see the
value :o)

As an added bonus, perhaps users could have their own definable queries
(with labels) saved directly in the database?

Original issue reported on code.google.com by [email protected] on 10 Oct 2007 at 3:20

New Features Patch

I would have posted this to the developers list, but I can't seem to get
that to work.

Changes:
- Added a program list similar to hosts.

- Optional RegExp matching of hosts, programs, and messages

- If RegExp matching is not used, the host/program "like" fields will
accept comma or semicolon delimited lists of hosts to match

- A slight cosmetic change to the message input area so they line up.

- Results pages display the facility and program, as well as the host, as
links for one click filtering.

- Results page headers allow you to adjust the results ordering via a link.

- Removed popups from messages that aren't found in CEMDB

- Date is only displayed if it's different from today

- Previously if $row['count'] > 1, CEMDB messages were never shown.  This
is fixed.

- Search page use $_SESSION to remember what you last entered into the form
so you can easily adjust the query rather than having to start over from
scratch


These next couple are things I've done for my setup, but other's may like
them as well.

- If MERGELOGTABLE is defined and exists, it defaults to that.

- syslog.conf updated to use INSERT DELAYED, results in a little bit better
db performance

- logrotate.php updated to use myisampack on rotated tables.  This
compresses them and makes them readonly, which is generally desirable for
logs archives.


The patch is based on SVN, which seems to be a little out of date.  I tried
to leave the existing code mostly in tact, follow similar style, and
comment everything I was doing.  Let me know if you have comments,
questions, want screenshots, a demo, or anything and I'll see what I can
cook up.

Thanks,
Brian

Original issue reported on code.google.com by [email protected] on 21 Sep 2007 at 7:30

Attachments:

• php-syslog-ng_2007-09-21_svn.patch.tar.bz2

Limited entries displayed using default search values

What steps will reproduce the problem?
1. Select the desired table
2. Click the Search button

What is the expected output? What do you see instead?
You expect to see entries from the selected table, instead you get none if
the table doesn't contain logs with today's date, as the date fields use
default values for the search: "from yesterday to now"

What version of the product are you using? On what operating system?
2.9.3a on Mandriva Linux 2007.1

Please provide any additional information below.
Attached is a patch that includes *any* entry in the selected table if the
date fields are left blank.

Original issue reported on code.google.com by [email protected] on 10 Jul 2007 at 8:47

Attachments:

• regularresult.php.patch

Feature Request

For better use in large environments, it should contain more program
information in the CEMDB. 

1. Support for Postfix messages 
2. Support for Amavis(-new/ng) messages
3. Spamassassin messages
4. User-defineable messages

The information for the Cisco routers is great, but this could be extended.
This makes it for junior engineers better to understand, and more
explainatory to managers.

Keep up the good work! It is, even without these requests in place, a great
tool!

Original issue reported on code.google.com by [email protected] on 30 Nov 2007 at 7:48

JpGraph Error Font

What steps will reproduce the problem?
1. Search --> Graph
2.
3.

What is the expected output? What do you see instead?
JpGraph Error Font file "/usr/share/fonts/corefonts/verdana.ttf" is not 
readable or does not exist.

What version of the product are you using? On what operating system?
Php-Syslog-NG 2.9.3l 

Please provide any additional information below.
OS:  SLES9x86SP3

Original issue reported on code.google.com by [email protected] on 15 Nov 2007 at 7:31

Attachments:

• JpGraph_Error.jpg

Save settings

Th way I use php-syslog-ng means that filtersettings are mostly the same
each time I login. So in order not to re-enter all the filter settings I
think it would be great to save these settings on a per user basis. Maybe
for the next release?

Best regards,

Tijmen van den Brink

Original issue reported on code.google.com by [email protected] on 25 Oct 2007 at 6:19

Cosmetic bug with Calendar

What steps will reproduce the problem?
1. Click the calendar icon on main page
2. Don't choose anything and click the icon again

What is the expected output? What do you see instead?
The icon should return to it's original place but it does not, it wraps
around to the new line.

Original issue reported on code.google.com by [email protected] on 29 Feb 2008 at 4:06

Matching log rotation to calendar entries

What steps will reproduce the problem?
1. select a date table e.g. 20061012 to search
2. perform a search

What is the expected output? What do you see instead?

-log entries for the desired date

What version of the product are you using? On what operating system?

-2.9.2a

Please provide any additional information below.

The indivdual date tables are empty?  I run logrotate.php at midnight.

Original issue reported on code.google.com by [email protected] on 12 Aug 2006 at 11:56

Enhancement: Database Squeeze (squeezedb.php)

I'm uploading this here for documentation purposes.

Description:
This file (meant to be run from cron) will go through your logs table and
perform a "de-duplication" of rows.
It uses a an algorithm similar to Levenshtein's
(http://en.wikipedia.org/wiki/Levenshtein_distance) to compare the number
of "edits" it would take to make each of the compared strings become the
same. The result is displayed as a percentage (a variable you can alter at
the beginning of the file)

I have seen an AMAZING improvement in my tests so far:
*Averages of 90% fewer rows after the script runs*

Note that you'll also want to modify your regurlarresult.php file to
include the new colums (FO, LO and Count)

Example:
Around line 413 of regularresult.php:
<td>DATE TIME</td> <-- EXISTING LINE
<td>FO</td>
<td>LO</td>
<td>COUNT</td>
<td>MESSAGE</td> <-- EXISTING LINE

And also around line 470 of regularresult.php
echo "<td>".$row['datetime']."</td>";  <-- EXISTING LINE
echo "<td>".$row['fo']."</td>";
echo "<td>".$row['lo']."</td>";
echo "<td>".$row['counter']."</td>";
if($row['count'] > 1) {  <-- EXISTING LINE


*** Please make sure you read the comments in the file before you run this
script as it will delete rows from your database ***

Original issue reported on code.google.com by [email protected] on 9 Feb 2008 at 6:09

Attachments:

• squeezedb.php