Rsyslog not feeding to Librenms

[jcyrus]

Hello all. I’m trying to incorporate syslog into LibreNMS, but I can’t get the messages to show on the webpage. I have tried following the directions on the website, but didn’t have any luck with those. I then attempted to just get rsyslog working on the machine that LibreNMS is installed on and while the logs are showing up on the server they aren’t being presented to via the webpage.

Here is my setup.

Rocky Linux 8.7 with LibreNMS installed. I’m using Rsyslog for syslog management. I have disabled SeLinux so that isn’t interfering and I have opened udp/tcp ports 514 on the firewall.

I have created the 30-librenms.conf file in the /etc/rsyslog.d directory and copy and pasted the version 8 contents into that file.

I’ve also modified the /etc/rsyslog.conf file to include:

$ModLoad imudp
$UDPServerRun 514

as well as :

$ModLoad imtcp
$InputTCPServerRun 514

Not sure what else to try at this point. Any help would be appreciated.

[jcyrus]

Ok. I seem to have figured this out. I went through the install again, but what I changed this time was instead of modifying the rsyslog.conf file and also creating a secondary config file in /etc/rsyslog.d/ I only created a secondary config file in the /etc/rsyslog.d directory and added this :

Listen for syslog messages on UDP:514

$ModLoad imudp
$UDPServerRun 514

Feed syslog messages to librenms

module(load=“omprog”)

template(name=“librenms”
type=“string”
string= “%fromhost%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% %timegenerated:8:25%||%msg%||%programname%\n”)
action(type=“omprog”
binary=“/opt/librenms/syslog.php”
template=“librenms”)

& stop

I also disabled SeLinux and created firewall rules that opened port 514 (this step was not in the the documentation). I then rebooted the vm and when it finished booting the syslog messages were present via the web.

Hopefully this might help someone else in the future.

Thank you.