可视化日志服务器搭建

1、服务端配置
1.配置repl源
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
2.软件包安装
yum install -y mariadb mariadb-server rsyslog-mysql
3.启动数据库
systemctl start mariadb
systemctl enable mariadb
4.设置数据库密码
mysqladmin -u root password 123456
5.建立库
cd /usr/share/doc/rsyslog-8.24.0/
mysql -uroot -p < mysql-createDB.sql
6.建立用户并受权(登入数据库）
grant all on Syslog.* to 'syslog'@'%'identified by 'syslogpw';
flush privileges;
7.修改配置文件
vim /etc/rsyslog.conf

#MODULES
$ModLoad imtcp
$InputTCPServerRun 514
$ModLoad ommysql
#RULES
local7.*        /var/log/boot.log
*.*            :ommysql:172.16.120.101,Syslog,syslog,syslogpw

8.重启服务
systemctl restart rsyslog
9.验证
logger "rsysylog test mysql"
mysql -uroot -p'123456' -e 'select * from Syslog.SystemEvents\G'

2、客户端配置
1.安装服务
yum install -y rsyslog-mysql
2.修改配置文件
vim /etc/rsyslog.conf

$ModLoad ommysql
*.*     :ommysql:192.168.1.55,Syslog,syslogroot,syslogpass

3.重启服务
systemctl restart rsyslog
4.验证
logger "client test 172.16.120.102"

3、安装loganalyzer（服务端）
1.安装依赖包
yum install -y httpd php php-mysqlnd php-gd
2.下载安装包
wget http://download.adiscon.com/loganalyzer/loganalyzer-4.1.11.tar.gz
3.解压配置
tar fx loganalyzer-4.1.11.tar.gz
cp -r loganalyzer-4.1.11/src/ /var/www/html/
cp -r loganalyzer-4.1.11/contrib/ /var/www/html/
cd /var/www/html/
sh configure.sh
4.启动服务
systemctl start httpd
systemctl enable httpd
5.建立库和用户（登入数据库）
create database loganalyzer;
grant all on loganalyzer.* to lyzer@'%' identified by 'lyzerpw';
flush privileges;
6.登陆
http://172.16.120.101/