Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2008 Forums
 SQL Server Administration (2008)
 SQL events and Linux Syslog Server

Author  Topic 

dmaxj
Posting Yak Master

174 Posts

Posted - 2010-10-25 : 19:26:01
Is there a convenient way to get certain events from SQL Server sent to a centralized Syslog server? The Syslog server is running on the Linux platform.

I have considered following solutions:

1) Use a server-side trace to capture the events and write to a file; push the file to the Syslog Server

2) Use a server-side trace to capture the events and write to a file; pull the file into Syslog Server

3) Compose an SSIS package to move the SQL output from a server-side trace to the Syslog server using odbc connections.

4) Hope that 3rd-party tool exist to handle this :)

Regards

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2010-10-25 : 21:25:08
I'll trace to a table, then output the results via custom script, which can be SSIS, to the syslog server
Go to Top of Page

dmaxj
Posting Yak Master

174 Posts

Posted - 2010-10-26 : 00:52:34
Ok - can you give more detail? Is this automated process, triggered manually, or sql agent - ssis package, etc.

Thanks you
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2010-10-28 : 00:15:04
Profiler will write the trace results to a table. That said, there is additional overhead. We have a server that is used by the DBA team for things like this.

If the trace is heavy, I'll trace to a file -- basically option (1) in your original post.
Go to Top of Page

dmaxj
Posting Yak Master

174 Posts

Posted - 2010-10-28 : 10:51:55
Thanks, russell -

I had another thought about whether a server-side trace and the increased overhead could be transferred to another host. This machine could run profiler against the production box AND handle the delivery of SQL Logs to Syslog server.

You think that approach could reduce load on prod server?
Go to Top of Page

dmaxj
Posting Yak Master

174 Posts

Posted - 2010-11-20 : 11:25:18
Revisiting this problem - any additional ideas?
Go to Top of Page

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2010-11-20 : 18:51:22
you can run a server-side trace without profiler -- that will reduce overhead -- and write the file anywhere you want. Eventually, you'll consume network resources when you copy the files.
Go to Top of Page

dmaxj
Posting Yak Master

174 Posts

Posted - 2010-12-03 : 14:37:46
I have since come to find a tool called SysLogAgent - http://syslogserver.com/syslogagent.html

I figured that I would share this with the forum.

Regards
Go to Top of Page
   

- Advertisement -