65 Commits

Author SHA1 Message Date
65f929d1f2 Fix log entries with timestamps included and incorrect time (leading * or .)
Issue #3316
2016-04-12 00:05:16 -05:00
d59fc01b61 Another test case for the cisco syslog timestamp prefix. 2016-03-09 10:49:12 -06:00
bca965e2ae Some devices have "logging timestamp" enabled, try to remove that from the start of the message.
Fixes #3199
2016-03-09 08:20:51 -06:00
29066cfcbc Merge pull request #3173 from Ultra2D/syslog-linux-openvpn
Syslog Linux OpenVPN pattern does not match example, remove it
2016-03-05 11:34:04 +00:00
ab67f7870c Merge pull request #3171 from Ultra2D/syslog-trim
Syslog trim whitespace
2016-03-05 11:26:09 +00:00
d74c37ab0e Syslog Linux OpenVPN pattern does not match example, remove it 2016-03-05 12:23:43 +01:00
fb34fb7ab5 Syslog trim whitespace 2016-03-05 11:06:29 +01:00
621d3be05c Merge branch 'master' into issue-3041 2016-03-05 10:05:46 +01:00
25e88f743c Remove dovecot match because of invalid pattern 2016-03-04 17:43:05 +01:00
f969317863 Human readable program, and append event ID to message 2016-03-04 16:14:47 +01:00
488f7f44c4 array_walk does not work like that, apparently input is trimmed later on 2016-03-04 15:51:49 +01:00
2b6439d502 Missing trailing delimiter in original code 2016-03-04 13:45:48 +01:00
4c5701531f Merge branch 'master' into issue-3035 2016-03-04 09:13:15 +01:00
f52954f8a4 The old load included the leading %. Stick with that behavior. 2016-03-03 00:03:17 -06:00
ea491c4a06 move the negation outside of the regular expression for more accurate results 2016-03-02 23:48:07 -06:00
fb9224d507 Keep original behaviour, just prevent false matches 2016-03-02 16:19:32 +01:00
71d88d6975 This should process all of the messages on these sites and if it fails, there should be no data loss
http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6000-series-switches/29804-186.html
http://www.cisco.com/c/en/us/td/docs/ios/system/messages/guide/consol_smg/sm_cnovr.html
2016-02-27 16:00:06 -06:00
d1f44ae1ec Simplify Cisco ios,iosxe,catos log processing.
This should cover the examples I could find on the web, but we could be missing some corner cases.
If we fail, the entire message is in msg, instead of being lost.
2016-02-26 10:19:22 -06:00
9f22b18dc8 Split is removed in PHP7, replace with explode as none were using it as a regex.
Also fix two array keys without quotes in include/syslog.php
Fixes #2205
2016-02-25 14:34:06 -06:00
49be124238 Fixed syslog: only parse messages if program is empty 2016-02-18 12:30:43 +01:00
b79d2906ae Rewrite sender-ip if ::ffff: is prepended because the syslogserver uses IPv6 2015-08-21 16:02:59 +02:00
d8693f05ae Fix coding style part 2 2015-07-15 11:04:22 +02:00
5a7988e2e4 chmod 0644 to php files not directly executed 2015-04-28 22:58:03 +02:00
af1e82ddbb process_syslog: remove debugging statements
Currently, filtered syslog messages (via syslog_filter) are spewed into
stdout (unlike unfiltered ones), presumably for debugging. When
syslog.php has been invoked from rsyslog, writing to stdout results in
an EPIPE which is unhandled and hence syslog.php dies. Remove them, as
they're completely redundant and of dubious gains to debugging.
2014-01-11 17:34:45 +02:00
b273e04241 /// -> //
git-svn-id: http://www.observium.org/svn/observer/trunk@3240 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 12:24:34 +00:00
cacf913a55 # -> / for phpdoc
git-svn-id: http://www.observium.org/svn/observer/trunk@3239 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-25 11:29:53 +00:00
4db1454e92 move from port_id to interface_id. make ports discovery only discover. add some cleaner functions. add a tiny bit of alerting infrastructure.
git-svn-id: http://www.observium.org/svn/observer/trunk@3195 61d68cd4-352d-0410-923a-c4978735b2b8
2012-05-16 13:25:50 +00:00
4fad2ccc68 syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2967 61d68cd4-352d-0410-923a-c4978735b2b8
2012-04-05 16:44:58 +00:00
86248c8bce make sensor_type larger, merge both logs into one tab (ran out of space!)
git-svn-id: http://www.observium.org/svn/observer/trunk@2719 61d68cd4-352d-0410-923a-c4978735b2b8
2011-11-07 19:39:15 +00:00
a369c442eb syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2643 61d68cd4-352d-0410-923a-c4978735b2b8
2011-10-04 14:38:54 +00:00
2dc8b807e9 syntaxer run
git-svn-id: http://www.observium.org/svn/observer/trunk@2642 61d68cd4-352d-0410-923a-c4978735b2b8
2011-10-04 09:10:21 +00:00
9a1bee1458 more code cleanup (last commit for now)
git-svn-id: http://www.observium.org/svn/observer/trunk@2520 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-20 14:37:54 +00:00
dc0ebc7343 more code cleanup
git-svn-id: http://www.observium.org/svn/observer/trunk@2517 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-20 14:22:34 +00:00
d864ce234f kill a whole bunch of trailing spaces
git-svn-id: http://www.observium.org/svn/observer/trunk@2516 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-20 09:55:11 +00:00
5cb7853b81 fix syslog for openvpn, patch by Yucong Sun
git-svn-id: http://www.observium.org/svn/observer/trunk@2422 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-07 08:31:42 +00:00
bb95ed4dc3 fix syslog a little.
git-svn-id: http://www.observium.org/svn/observer/trunk@2406 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-02 09:01:32 +00:00
232b330f3d fixed syslog? why knows!
git-svn-id: http://www.observium.org/svn/observer/trunk@2405 61d68cd4-352d-0410-923a-c4978735b2b8
2011-09-02 06:56:21 +00:00
2778e4b90d delete users (and all perms) fixed
git-svn-id: http://www.observium.org/svn/observer/trunk@2371 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-26 21:27:40 +00:00
7e16919426 more db
git-svn-id: http://www.observium.org/svn/observer/trunk@2317 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-14 21:51:58 +00:00
6f461860f9 sort of fix syslog. ish.
git-svn-id: http://www.observium.org/svn/observer/trunk@2295 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-13 00:13:57 +00:00
e1829ba0f7 revert something that broke syslog 2 months ago...
git-svn-id: http://www.observium.org/svn/observer/trunk@2293 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 23:15:56 +00:00
6bcc4f4e48 fix some stuff, break some stuff (ports disaply is missing some stuff atm)
git-svn-id: http://www.observium.org/svn/observer/trunk@2290 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 22:14:56 +00:00
2522421528 replace mysql_ with db* (update with caution, it works for me but...)
git-svn-id: http://www.observium.org/svn/observer/trunk@2282 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 17:59:00 +00:00
ebcbf22317 move includes/billing.php includes/syslog.php and includes/functions.php to dbFacile
git-svn-id: http://www.observium.org/svn/observer/trunk@2278 61d68cd4-352d-0410-923a-c4978735b2b8
2011-05-12 11:58:17 +00:00
238c8cf85a catos support for syslog
git-svn-id: http://www.observium.org/svn/observer/trunk@2187 61d68cd4-352d-0410-923a-c4978735b2b8
2011-04-27 19:34:16 +00:00
4bc15529d4 eradicate split() in favour of explode()
git-svn-id: http://www.observium.org/svn/observer/trunk@2054 61d68cd4-352d-0410-923a-c4978735b2b8
2011-04-11 09:22:12 +00:00
a8d60662d2 clean, clean, clean, all i have to do is clean
git-svn-id: http://www.observium.org/svn/observer/trunk@1855 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-15 15:27:14 +00:00
36e95e0c5a ignore timeout/retries if timeout/retries == 0
git-svn-id: http://www.observium.org/svn/observer/trunk@1825 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-12 11:32:02 +00:00
92777ab03b cleanups, reindents, etc
git-svn-id: http://www.observium.org/svn/observer/trunk@1821 61d68cd4-352d-0410-923a-c4978735b2b8
2011-03-11 18:03:49 +00:00
d07689c8d4 syslog handling update
git-svn-id: http://www.observium.org/svn/observer/trunk@1507 61d68cd4-352d-0410-923a-c4978735b2b8
2010-07-28 19:52:47 +00:00