oracle_linux_loganalyzer
yum list
yum update -y
yum upgrade -y
yum clean all
systemctl disable firewalld
systemctl stop firewalld
sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config
init 6
yum install net-tools
yum install bind-utils
yum install wget
yum install tar
yum install mc

yum install epel-release
yum install systemd-timesyncd
mcedit /etc/systemd/timesyncd.conf
...
[Time]
NTP=192.168.150.2 192.168.150.109
...
mcedit /etc/inputrc
...
"\e[A":history-search-backward
"\e[B":history-search-forward
yum install httpd
systemctl start httpd
systemctl enable httpd
yum install php
yum install php-gd 
yum install php-mysqlnd
systemctl restart httpd

yum install mariadb-server
systemctl start mariadb
systemctl enable mariadb
mysql_secure_installation
mcedit /etc/my.cnf.d/utf-8.cnf
[mysqld]
init_connect='SET collation_connection = utf8_unicode_ci'
character-set-server = utf8
collation-server = utf8_unicode_ci
[client]
default-character-set = utf8
systemctl restart mariadb
yum install rsyslog
yum install rsyslog-mysql
systemctl start rsyslog
systemctl enable rsyslog
mysql -uroot -p < /usr/share/doc/rsyslog/mysql-createDB.sql
mysql -uroot -p
show databases;
create user rsyslog@localhost;
set password for rsyslog@localhost = password('super_puper_password');
grant all on Syslog.* to rsyslog@localhost;
create database loganalyzer;
grant all on loganalyzer.* to rsyslog@localhost;
flush privileges;
\q
cd /root
wget https://download.adiscon.com/loganalyzer/loganalyzer-4.1.13.tar.gz
tar -zxvf loganalyzer-4.1.13.tar.gz
mkdir -p /var/www/html/logs/
cp -r loganalyzer-4.1.13/src/* /var/www/html/logs/
cp loganalyzer-4.1.13/contrib/configure.sh /var/www/html/logs/
cp loganalyzer-4.1.13/contrib/secure.sh /var/www/html/logs/
cd /var/www/html/logs/
sh configure.sh
http://192.168.150.116/logs/
here-next
Settings loganalyzer:
Enable User Database-YES
Database Host-localhost
Database Port-3306
Database Name-loganalyzer
...
Database User-rsyslog
...
Require user to be logged in-Yes
Authentication method-Internal authentication
Next
Next
Next
Username-admin
Password-****
Repeat Password-****
Next
Step 7 - Create the first source for syslog messages
Name of the Source-SYSLOG
Source Type-MYSQL Native
Select View-Syslog Fields
Table Type-MonitorWare 
Database Host-localhost
Database Name-Syslog
Database Tablename-SystemEvents
Database User-rsyslog
Database Password-****
Enable Row Counting-Yes	
Next
Finish
mcedit /etc/rsyslog.conf
 
...
module(load="imudp") # needs to be done just once
input(type="imudp" port="514")
module(load="imtcp") # needs to be done just once
input(type="imtcp" port="514")

module(load="ommysql")
authpriv.*;*.warning            :ommysql:127.0.0.1,Syslog,rsyslog,super_puper_password
...
systemctl restart rsyslog
cd /var/www/html/logs/
sh secure.sh
rm -f secure.sh configure.sh
oracle_linux_loganalyzer.txt · Last modified: 2026/05/24 10:18 by admin