. See AUTHORS to learn who helped make it become a reality. */#### #### #### #### #### #### #### #### #### #### include 'include.php'; WriteStandardHeader(_MSGShwSlt); //classes include _CLASSES . 'eventsnavigation.php'; include _CLASSES . 'eventfilter.php'; // SELECT COUNT(ID) AS occurences, ID, FromHost, Message, SysLogTag FROM SystemEvents WHERE InfoUnitID=1 AND ReceivedAt >= '2004-01-01 00:00:00' AND ReceivedAt <= '2004-10-26 23:59:59' GROUP BY SysLogTag ORDER BY occurences DESC limit 0,20 // SELECT COUNT(ID) AS occurences, SysLogTag FROM SystemEvents WHERE (InfoUnitID = 1) AND (ReceivedAt >= '2004-01-01 00:00:00') AND (ReceivedAt <= '2004-10-26 23:59:59') GROUP BY SysLogTag // TO-DO: Change "ExampleHost" to "Most Host" //the splitted sql statement // Cause MSSQL has proplems with GROUP BY clauses we need to do 2 DataBase-Queries // the first one gets the occurences on one syslogtag, the syslogtag itself and the host. // the second one only gets the message! // Don't try to combine these two queries! MSSQL will give you a headnut! :D $cmdSQLfirst_part = 'SELECT '; $cmdSQLmain_part_1 = "COUNT(ID) AS occurences, SysLogTag"; $cmdSQLmain_part_2 = "ID, Message FROM "._DBTABLENAME; $cmdSQLlast_part_1 = ' WHERE InfoUnitID=1 AND '; $cmdSQLlast_part_2 = ' WHERE InfoUnitID=1 AND '; // define the last part of the sql statment, e.g. the where part, ordery by, etc. $myFilter = New EventFilter; // Which methode is choosed? if($_SESSION['show_methode'] == "Host") { $myFilter->SetSQLGroup("SysLogTagHost"); $cmdSQLmain_part_1 .= ", FromHost FROM "._DBTABLENAME; } else { if($_SESSION['tag_order'] == "Host") $_SESSION['tag_order'] = "SysLogTag"; $myFilter->SetSQLGroup("SysLogTag"); $cmdSQLmain_part_1 .= " FROM "._DBTABLENAME; } $cmdSQLlast_part_1 .= $myFilter->GetSQLWherePart(1); $cmdSQLlast_part_2 .= $myFilter->GetSQLWherePart(1); // how much data records should be displayed on one page if($_SESSION['epp'] < 1 || $_SESSION['epp'] > 100) $myEventsNavigation = new EventsNavigation(20); else $myEventsNavigation = new EventsNavigation($_SESSION['epp']); // show (include) quick filters include "quick-filter.php"; echo "
"; // how much data records match with the filter settings // if(strtolower(_CON_MODE) == "odbc" && strtolower(_DB_APP) == "mssql") // $myEventsNavigation->EventCount = odbc_record_count($global_Con, $cmdSQLfirst_part . $cmdSQLmain_part_1 . $cmdSQLlast_part_1); // else $myEventsNavigation->SetEventCount($global_Con, $cmdSQLlast_part_1); $num = $myEventsNavigation->GetEventCount(); $cmdSQLlast_part_1 .= $myFilter->GetSQLGroup(); $cmdSQLlast_part_1 .= $myFilter->GetSysLogTagSQLSort(); // SQL statement to get result with limitation $res1 = db_exec_limit($global_Con, $cmdSQLfirst_part, $cmdSQLmain_part_1, $cmdSQLlast_part_1, $myEventsNavigation->GetLimitLower(), $myEventsNavigation->GetPageSize(), $myFilter->OrderBy); if($num == 0) { // output if no data exit for the search string echo '
', _MSGNoData, ''; } else { echo ''; echo '

'; echo _MSGEvn, ' ', $myEventsNavigation->GetLimitLower(), ' ', _MSGTo, ' ', $myEventsNavigation->GetLimitUpper(), ' ', _MSGFrm, ' ', $myEventsNavigation->GetEventCount(); echo '

'; $myEventsNavigation->ShowNavigation(); ?>

Example Host";?> '; if($_SESSION['show_methode'] == "Host") echo ''; echo ''; echo ''; $message = htmlspecialchars($message); if(isset($_SESSION['regexp']) && $_SESSION['regexp'] != "") { $_SESSION['regexp'] = trim($_SESSION['regexp']); $messageUp = strtoupper($message); $regexpUp = strtoupper($_SESSION['regexp']); $search_pos = strpos($messageUp, $regexpUp); if($search_pos !== FALSE) { $regexpLng = strlen($_SESSION['regexp']); $strCount = substr_count($messageUp, $regexpUp); $strTmp = $message; $message = ''; for($i = 0; $i < $strCount; $i++) { $messageUp = strtoupper($strTmp); $search_pos = strpos($messageUp, $regexpUp); $subStrSt = substr($strTmp, 0 , $search_pos); $subStrExp = substr($strTmp, $search_pos, $regexpLng); $subStrEnd = substr($strTmp, ($search_pos + $regexpLng)); $message .= $subStrSt . '' . $subStrExp . ''; if($i == ($strCount - 1)) $message .= $subStrEnd; $strTmp = $subStrEnd; } } } //Replace the words that had been read out from the ini file if($file != FALSE) { for($i = 0; $i < $numarraywords; $i++) { $repstr = ''; $words[$i] = trim($words[$i]); for($j = 0; $j < strlen($words[$i]); $j++) $repstr .= '*'; if($words[$i] != '') $message = eregi_replace($words[$i], $repstr, $message); } } echo ''; //message //for changing colors if($tc == 1) $tc = 2; else $tc = 1; /* echo ""; */ echo ''; } echo "

SysLogTag	Occurences	Example Message - Click for full list
' . $row1['FromHost'] . '	' . $row1['SysLogTag'] . '	' . $row1['occurences'] . '	', $message, '	".$row['Priority']."

"; } WriteFooter(); ?>