Hi all, I have an observium system running quite happily. I’ve tried to integrate the syslogging functionality but getting strange results. Not sure whether the problem lies with syslog-ng, PHP or the sucking of data into Observium. Let me explain:

 

With syslog-ng started in foreground mode ‘syslog-ng -Fevd’ everything works as expected. I see syslog packets coming in via tcpdump, I see the log flash up on the terminal and it correctly routes into the right part of the Observium front end.

 

With syslog-ng started as a daemon (the desired config setup), nothing gets to Observium. I can still see the syslog packets in tcpdump obviously but I’m blind as to what happens to the messages after that.

 

One thing I have noticed is that when running syslog-ng in foreground mode, I see “Starting destination program; cmdline='/opt/observium/syslog.php'” in the startup messages and a corresponding process in the ps –lax output “php /opt/observium/syslog.php”

 

With syslog-ng started as a daemon, I do not see this php process.

 

Bit stuck as to where to look next. Has anyone seen this behavior before?

 

Centos6.5 and standard packages and configs. System works great otherwise/

 

Cheers

iain