oracle_linux_loganalyzer
yum list yum update -y yum upgrade -y yum clean all
systemctl disable firewalld systemctl stop firewalld sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config init 6
yum install net-tools yum install bind-utils yum install wget yum install tar yum install mc yum install epel-release yum install systemd-timesyncd
mcedit /etc/systemd/timesyncd.conf
... [Time] NTP=192.168.150.2 192.168.150.109 ...
mcedit /etc/inputrc
... "\e[A":history-search-backward "\e[B":history-search-forward
yum install httpd systemctl start httpd systemctl enable httpd yum install php yum install php-gd yum install php-mysqlnd systemctl restart httpd yum install mariadb-server systemctl start mariadb systemctl enable mariadb
mysql_secure_installation
mcedit /etc/my.cnf.d/utf-8.cnf
[mysqld] init_connect='SET collation_connection = utf8_unicode_ci' character-set-server = utf8 collation-server = utf8_unicode_ci [client] default-character-set = utf8
systemctl restart mariadb
yum install rsyslog yum install rsyslog-mysql systemctl start rsyslog systemctl enable rsyslog
mysql -uroot -p < /usr/share/doc/rsyslog/mysql-createDB.sql
mysql -uroot -p
show databases;
create user rsyslog@localhost;
set password for rsyslog@localhost = password('super_puper_password');
grant all on Syslog.* to rsyslog@localhost;
create database loganalyzer;
grant all on loganalyzer.* to rsyslog@localhost;
flush privileges;
\q
cd /root wget https://download.adiscon.com/loganalyzer/loganalyzer-4.1.13.tar.gz tar -zxvf loganalyzer-4.1.13.tar.gz mkdir -p /var/www/html/logs/ cp -r loganalyzer-4.1.13/src/* /var/www/html/logs/ cp loganalyzer-4.1.13/contrib/configure.sh /var/www/html/logs/ cp loganalyzer-4.1.13/contrib/secure.sh /var/www/html/logs/ cd /var/www/html/logs/ sh configure.sh
http://192.168.150.116/logs/
here-next Settings loganalyzer: Enable User Database-YES Database Host-localhost Database Port-3306 Database Name-loganalyzer ... Database User-rsyslog ... Require user to be logged in-Yes Authentication method-Internal authentication Next Next Next Username-admin Password-**** Repeat Password-**** Next Step 7 - Create the first source for syslog messages Name of the Source-SYSLOG Source Type-MYSQL Native Select View-Syslog Fields Table Type-MonitorWare Database Host-localhost Database Name-Syslog Database Tablename-SystemEvents Database User-rsyslog Database Password-**** Enable Row Counting-Yes Next Finish
mcedit /etc/rsyslog.conf
... module(load="imudp") # needs to be done just once input(type="imudp" port="514") module(load="imtcp") # needs to be done just once input(type="imtcp" port="514") module(load="ommysql") authpriv.*;*.warning :ommysql:127.0.0.1,Syslog,rsyslog,super_puper_password ...
systemctl restart rsyslog
cd /var/www/html/logs/ sh secure.sh rm -f secure.sh configure.sh
oracle_linux_loganalyzer.txt · Last modified: 2026/05/24 10:18 by admin