GitHub-Mirror/CLF
Archived
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

updates the doco and schema

Browse source
This commit is contained in:
Fish 2005-01-26 04:17:22 +00:00
parent e23bac42b1
commit 439e90e0e7
7 changed files with 1498 additions and 516 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
.gitattributes vendored
View file

@ -50,9 +50,10 @@ html/background.php -text
html/calendar.php -text html/calendar.php -text
html/config.php -text html/config.php -text
html/customer.php -text html/customer.php -text
html/data/TSyslog.sql -text
html/data/install -text html/data/install -text
html/data/pgsql.msyslog -text html/data/securityframework.sql -text
html/data/pgsql.secframe -text html/data/securityframeworkdata.sql -text
html/equiptype.php -text html/equiptype.php -text
html/faq.txt -text html/faq.txt -text
html/filter.php -text html/filter.php -text

940
html/data/TSyslog.sql Normal file
View file

@ -0,0 +1,940 @@
--
-- PostgreSQL database dump
--
\connect - postgres
--
-- TOC entry 1 (OID 0)
-- Name: TSyslog; Type: DATABASE; Schema: -; Owner: postgres
--
CREATE DATABASE "TSyslog" WITH TEMPLATE = template0 ENCODING = 0;
\connect "TSyslog" postgres
\connect - msyslog
SET search_path = public, pg_catalog;
--
-- TOC entry 2 (OID 4512536)
-- Name: syslog_tmail; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tmail (
tmail_id bigserial NOT NULL,
tmail_open integer,
tmail_date date NOT NULL,
tmail_time time without time zone NOT NULL,
tlogin_id bigint NOT NULL
);
--
-- TOC entry 3 (OID 4512536)
-- Name: syslog_tmail; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tmail FROM PUBLIC;
--
-- TOC entry 45 (OID 4512536)
-- Name: syslog_tmail_tmail_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tmail_tmail_id_seq FROM PUBLIC;
--
-- TOC entry 4 (OID 4512541)
-- Name: syslog_tlaunchqueue; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tlaunchqueue (
tlaunchqueue_id bigserial NOT NULL,
tlaunchqueue_desc character varying(256),
tlaunch_id bigint NOT NULL,
tmail_id bigint NOT NULL,
tsyslog_id bigint NOT NULL
);
--
-- TOC entry 5 (OID 4512541)
-- Name: syslog_tlaunchqueue; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tlaunchqueue FROM PUBLIC;
--
-- TOC entry 46 (OID 4512541)
-- Name: syslog_tlaunchqueue_tlaunchqueue_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tlaunchqueue_tlaunchqueue_id_seq FROM PUBLIC;
--
-- TOC entry 6 (OID 4512546)
-- Name: syslog_tsuspend; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tsuspend (
tsuspend_id bigserial NOT NULL,
tsuspend_status integer NOT NULL,
tlogin_id bigint NOT NULL
);
--
-- TOC entry 47 (OID 4512546)
-- Name: syslog_tsuspend_tsuspend_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tsuspend_tsuspend_id_seq FROM PUBLIC;
--
-- TOC entry 7 (OID 4512551)
-- Name: syslog_temail; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_temail (
temail_id bigserial NOT NULL,
temail_email character varying(80) NOT NULL,
temail_desc character varying(256),
tmail_id bigint NOT NULL,
tsyslog_id bigint NOT NULL
);
--
-- TOC entry 8 (OID 4512551)
-- Name: syslog_temail; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_temail FROM PUBLIC;
--
-- TOC entry 48 (OID 4512551)
-- Name: syslog_temail_temail_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_temail_temail_id_seq FROM PUBLIC;
--
-- TOC entry 9 (OID 4512556)
-- Name: tsyslog; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE tsyslog (
tsyslog_id bigserial NOT NULL,
facility integer,
severity integer,
date date,
"time" time without time zone,
host character varying(128),
message text
);
--
-- TOC entry 10 (OID 4512556)
-- Name: tsyslog; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE tsyslog FROM PUBLIC;
--
-- TOC entry 49 (OID 4512556)
-- Name: tsyslog_tsyslog_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE tsyslog_tsyslog_id_seq FROM PUBLIC;
--
-- TOC entry 11 (OID 4512564)
-- Name: syslog_tarchive; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tarchive (
tsyslog_id bigserial NOT NULL,
facility integer,
severity integer,
date date,
"time" time without time zone,
host character varying(128),
message text
);
--
-- TOC entry 12 (OID 4512564)
-- Name: syslog_tarchive; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tarchive FROM PUBLIC;
--
-- TOC entry 50 (OID 4512564)
-- Name: syslog_tarchive_tsyslog_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tarchive_tsyslog_id_seq FROM PUBLIC;
--
-- TOC entry 13 (OID 4512572)
-- Name: syslog_tfilter; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tfilter (
tfilter_id bigserial NOT NULL,
tfilter_userorglobal integer NOT NULL,
tfilter_desc character varying(128) NOT NULL,
tlogin_id integer NOT NULL
);
--
-- TOC entry 14 (OID 4512572)
-- Name: syslog_tfilter; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tfilter FROM PUBLIC;
--
-- TOC entry 51 (OID 4512572)
-- Name: syslog_tfilter_tfilter_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tfilter_tfilter_id_seq FROM PUBLIC;
--
-- TOC entry 15 (OID 4512577)
-- Name: syslog_tfilterdata; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tfilterdata (
tfilterdata_id bigserial NOT NULL,
tfilterdata_filter character varying(80),
tfilterdata_include integer,
tfilterdata_filterorlevel integer,
tfilterdata_startfacility integer,
tfilterdata_stopfacility integer,
tfilterdata_startseverity integer,
tfilterdata_stopseverity integer,
tfilter_id bigint NOT NULL
);
--
-- TOC entry 16 (OID 4512577)
-- Name: syslog_tfilterdata; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tfilterdata FROM PUBLIC;
--
-- TOC entry 17 (OID 4512582)
-- Name: syslog_tsave; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tsave (
tsave_id bigserial NOT NULL,
tsave_expiredate date NOT NULL,
tsave_desc character varying(128),
tsave_time time without time zone NOT NULL,
tsave_date date NOT NULL,
tlogin_id integer NOT NULL
);
--
-- TOC entry 18 (OID 4512582)
-- Name: syslog_tsave; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tsave FROM PUBLIC;
--
-- TOC entry 52 (OID 4512582)
-- Name: syslog_tsave_tsave_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tsave_tsave_id_seq FROM PUBLIC;
--
-- TOC entry 19 (OID 4512587)
-- Name: syslog_tsavedata; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tsavedata (
tsavedata_id bigserial NOT NULL,
tsavedata_date date NOT NULL,
tsavedata_time time without time zone NOT NULL,
tsavedata_host character varying(128) NOT NULL,
tsavedata_message text NOT NULL,
tsavedata_facility integer,
tsavedata_severity integer,
tsave_id bigint NOT NULL
);
--
-- TOC entry 20 (OID 4512587)
-- Name: syslog_tsavedata; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tsavedata FROM PUBLIC;
--
-- TOC entry 21 (OID 4512593)
-- Name: syslog_tprocess; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tprocess (
tprocess_id bigint,
thost_id bigint NOT NULL
);
--
-- TOC entry 22 (OID 4512593)
-- Name: syslog_tprocess; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tprocess FROM PUBLIC;
--
-- TOC entry 23 (OID 4512597)
-- Name: syslog_thost; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_thost (
thost_id bigserial NOT NULL,
thost_host character varying(128) NOT NULL,
thost_alertexpire integer,
thost_logexpire integer,
thost_rate bigint,
tpremadetype_id bigint NOT NULL,
do_logreport bigint,
log_reviewers bigint
);
--
-- TOC entry 24 (OID 4512597)
-- Name: syslog_thost; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_thost FROM PUBLIC;
--
-- TOC entry 53 (OID 4512597)
-- Name: syslog_thost_thost_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_thost_thost_id_seq FROM PUBLIC;
--
-- TOC entry 25 (OID 4512602)
-- Name: syslog_tprocessorprofile; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tprocessorprofile (
tprocessorprofile_id bigserial NOT NULL,
thost_id bigint NOT NULL,
tlogin_id bigint NOT NULL
);
--
-- TOC entry 26 (OID 4512602)
-- Name: syslog_tprocessorprofile; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tprocessorprofile FROM PUBLIC;
--
-- TOC entry 27 (OID 4512607)
-- Name: syslog_tcustomerprofile; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tcustomerprofile (
tcustomerprofile_id bigserial NOT NULL,
tcustomerprofile_editrules bigint,
thost_id bigint NOT NULL,
tlogin_id bigint NOT NULL
);
--
-- TOC entry 28 (OID 4512607)
-- Name: syslog_tcustomerprofile; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tcustomerprofile FROM PUBLIC;
--
-- TOC entry 29 (OID 4512612)
-- Name: syslog_tlaunch; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tlaunch (
tlaunch_id bigserial NOT NULL,
tlaunch_program text NOT NULL,
tlaunch_longdesc text NOT NULL,
tlaunch_shortdesc character varying(30) NOT NULL
);
--
-- TOC entry 30 (OID 4512612)
-- Name: syslog_tlaunch; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tlaunch FROM PUBLIC;
--
-- TOC entry 54 (OID 4512612)
-- Name: syslog_tlaunch_tlaunch_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tlaunch_tlaunch_id_seq FROM PUBLIC;
--
-- TOC entry 31 (OID 4512620)
-- Name: syslog_talert; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_talert (
talert_id bigserial NOT NULL,
talert_date date,
talert_time time without time zone,
talert_info character varying(80),
tsyslog_id bigint
);
--
-- TOC entry 32 (OID 4512620)
-- Name: syslog_talert; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_talert FROM PUBLIC;
--
-- TOC entry 55 (OID 4512620)
-- Name: syslog_talert_talert_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_talert_talert_id_seq FROM PUBLIC;
--
-- TOC entry 33 (OID 4512625)
-- Name: syslog_truledeny; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_truledeny (
truledeny_id bigserial NOT NULL,
truledeny_expression character varying(80) NOT NULL,
truledeny_startfacility integer,
truledeny_stopfacility integer,
truledeny_startseverity integer,
truledeny_stopseverity integer,
trule_id bigint
);
--
-- TOC entry 34 (OID 4512625)
-- Name: syslog_truledeny; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_truledeny FROM PUBLIC;
--
-- TOC entry 35 (OID 4512630)
-- Name: syslog_trule; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_trule (
trule_id bigserial NOT NULL,
trule_logalert integer,
trule_email character varying(80),
trule_expression character varying(80),
trule_desc character varying(256),
trule_ruleorlevel integer,
trule_startfacility integer,
trule_stopfacility integer,
trule_startseverity integer,
trule_stopseverity integer,
trule_threshold integer,
trule_thresholdtype integer,
trule_starttime bigint,
trule_endtime bigint,
trule_timertype integer,
trule_daysofweek integer,
tlaunch_id bigint,
thost_id bigint NOT NULL
);
--
-- TOC entry 36 (OID 4512630)
-- Name: syslog_trule; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_trule FROM PUBLIC;
--
-- TOC entry 56 (OID 4512630)
-- Name: syslog_trule_trule_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_trule_trule_id_seq FROM PUBLIC;
--
-- TOC entry 37 (OID 4512635)
-- Name: syslog_tpremadetype; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tpremadetype (
tpremadetype_id bigserial NOT NULL,
tpremadetype_desc character varying(40) NOT NULL,
logwatch_cmd text
);
--
-- TOC entry 38 (OID 4512635)
-- Name: syslog_tpremadetype; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tpremadetype FROM PUBLIC;
--
-- TOC entry 39 (OID 4512643)
-- Name: syslog_tpremadedeny; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tpremadedeny (
tpremadedeny_id bigserial NOT NULL,
tpremadedeny_expression character varying(80) NOT NULL,
tpremadedeny_startfacility integer,
tpremadedeny_stopfacility integer,
tpremadedeny_startseverity integer,
tpremadedeny_stopseverity integer,
tpremade_id bigint
);
--
-- TOC entry 40 (OID 4512643)
-- Name: syslog_tpremadedeny; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tpremadedeny FROM PUBLIC;
--
-- TOC entry 41 (OID 4512648)
-- Name: syslog_tpremade; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tpremade (
tpremade_id bigserial NOT NULL,
tpremade_code character varying(80) NOT NULL,
tpremade_desc text,
tpremade_premadeorlevel integer,
tpremade_startfacility integer,
tpremade_stopfacility integer,
tpremade_startseverity integer,
tpremade_stopseverity integer,
tpremadetype_id bigint,
tpremade_threshold integer,
tpremade_thresholdtype integer,
tlaunch_id bigint
);
--
-- TOC entry 42 (OID 4512648)
-- Name: syslog_tpremade; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tpremade FROM PUBLIC;
--
-- TOC entry 57 (OID 4512648)
-- Name: syslog_tpremade_tpremade_id_seq; Type: ACL; Schema: public; Owner: msyslog
--
REVOKE ALL ON TABLE syslog_tpremade_tpremade_id_seq FROM PUBLIC;
--
-- TOC entry 43 (OID 4512656)
-- Name: syslog_tsummary; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_tsummary (
tsummary_id serial NOT NULL,
host character varying(128),
date date,
data text
);
--
-- TOC entry 44 (OID 4512664)
-- Name: syslog_treview; Type: TABLE; Schema: public; Owner: msyslog
--
CREATE TABLE syslog_treview (
id serial NOT NULL,
reviewer bigint,
date timestamp without time zone,
tsummary_id bigint,
comments text
);
--
-- TOC entry 59 (OID 7875235)
-- Name: syslog_tmail_tlogin_id; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE UNIQUE INDEX syslog_tmail_tlogin_id ON syslog_tmail USING btree (tlogin_id);
--
-- TOC entry 63 (OID 7875236)
-- Name: host_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX host_idx ON tsyslog USING btree (host);
--
-- TOC entry 66 (OID 7875237)
-- Name: tsyslogdatetime_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tsyslogdatetime_idx ON tsyslog USING btree (date, "time");
--
-- TOC entry 64 (OID 7875238)
-- Name: tsyslhostid_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tsyslhostid_idx ON tsyslog USING btree (tsyslog_id, host);
--
-- TOC entry 67 (OID 7875239)
-- Name: archhost_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX archhost_idx ON syslog_tarchive USING btree (host);
--
-- TOC entry 69 (OID 7875240)
-- Name: tarchdatetime_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tarchdatetime_idx ON syslog_tarchive USING btree (date, "time");
--
-- TOC entry 70 (OID 7875241)
-- Name: tarchhostid_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tarchhostid_idx ON syslog_tarchive USING btree (tsyslog_id, host);
--
-- TOC entry 75 (OID 7875242)
-- Name: tsavedata_saveid_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tsavedata_saveid_idx ON syslog_tsavedata USING btree (tsave_id);
--
-- TOC entry 78 (OID 7875243)
-- Name: tprocessorprofile_tlogin_id_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tprocessorprofile_tlogin_id_idx ON syslog_tprocessorprofile USING btree (tlogin_id);
--
-- TOC entry 80 (OID 7875244)
-- Name: tcustomerprofile_tlogin_id_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tcustomerprofile_tlogin_id_idx ON syslog_tcustomerprofile USING btree (tlogin_id);
--
-- TOC entry 82 (OID 7875245)
-- Name: tlaunch_shortdesc_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE UNIQUE INDEX tlaunch_shortdesc_idx ON syslog_tlaunch USING btree (tlaunch_shortdesc);
--
-- TOC entry 84 (OID 7875246)
-- Name: talert_tsyslog_id_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE UNIQUE INDEX talert_tsyslog_id_idx ON syslog_talert USING btree (tsyslog_id);
--
-- TOC entry 86 (OID 7875247)
-- Name: trule_id_deny_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX trule_id_deny_idx ON syslog_truledeny USING btree (trule_id);
--
-- TOC entry 88 (OID 7875248)
-- Name: trule_host_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX trule_host_idx ON syslog_trule USING btree (thost_id);
--
-- TOC entry 91 (OID 7875249)
-- Name: tpremade_id_deny_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tpremade_id_deny_idx ON syslog_tpremadedeny USING btree (tpremade_id);
--
-- TOC entry 93 (OID 7875250)
-- Name: tpremadetype_id2_idx; Type: INDEX; Schema: public; Owner: msyslog
--
CREATE INDEX tpremadetype_id2_idx ON syslog_tpremade USING btree (tpremadetype_id);
--
-- TOC entry 58 (OID 7875251)
-- Name: syslog_tmail_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tmail
ADD CONSTRAINT syslog_tmail_pkey PRIMARY KEY (tmail_id);
--
-- TOC entry 60 (OID 7875253)
-- Name: syslog_tlaunchqueue_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tlaunchqueue
ADD CONSTRAINT syslog_tlaunchqueue_pkey PRIMARY KEY (tlaunchqueue_id);
--
-- TOC entry 61 (OID 7875255)
-- Name: syslog_tsuspend_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tsuspend
ADD CONSTRAINT syslog_tsuspend_pkey PRIMARY KEY (tsuspend_id);
--
-- TOC entry 62 (OID 7875257)
-- Name: syslog_temail_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_temail
ADD CONSTRAINT syslog_temail_pkey PRIMARY KEY (temail_id);
--
-- TOC entry 65 (OID 7875259)
-- Name: tsyslog_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY tsyslog
ADD CONSTRAINT tsyslog_pkey PRIMARY KEY (tsyslog_id);
--
-- TOC entry 68 (OID 7875261)
-- Name: syslog_tarchive_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tarchive
ADD CONSTRAINT syslog_tarchive_pkey PRIMARY KEY (tsyslog_id);
--
-- TOC entry 71 (OID 7875263)
-- Name: syslog_tfilter_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tfilter
ADD CONSTRAINT syslog_tfilter_pkey PRIMARY KEY (tfilter_id);
--
-- TOC entry 72 (OID 7875265)
-- Name: syslog_tfilterdata_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tfilterdata
ADD CONSTRAINT syslog_tfilterdata_pkey PRIMARY KEY (tfilterdata_id);
--
-- TOC entry 73 (OID 7875267)
-- Name: syslog_tsave_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tsave
ADD CONSTRAINT syslog_tsave_pkey PRIMARY KEY (tsave_id);
--
-- TOC entry 74 (OID 7875269)
-- Name: syslog_tsavedata_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tsavedata
ADD CONSTRAINT syslog_tsavedata_pkey PRIMARY KEY (tsavedata_id);
--
-- TOC entry 76 (OID 7875271)
-- Name: syslog_thost_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_thost
ADD CONSTRAINT syslog_thost_pkey PRIMARY KEY (thost_id);
--
-- TOC entry 77 (OID 7875273)
-- Name: syslog_tprocessorprofile_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tprocessorprofile
ADD CONSTRAINT syslog_tprocessorprofile_pkey PRIMARY KEY (tprocessorprofile_id);
--
-- TOC entry 79 (OID 7875275)
-- Name: syslog_tcustomerprofile_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tcustomerprofile
ADD CONSTRAINT syslog_tcustomerprofile_pkey PRIMARY KEY (tcustomerprofile_id);
--
-- TOC entry 81 (OID 7875277)
-- Name: syslog_tlaunch_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tlaunch
ADD CONSTRAINT syslog_tlaunch_pkey PRIMARY KEY (tlaunch_id);
--
-- TOC entry 83 (OID 7875279)
-- Name: syslog_talert_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_talert
ADD CONSTRAINT syslog_talert_pkey PRIMARY KEY (talert_id);
--
-- TOC entry 85 (OID 7875281)
-- Name: syslog_truledeny_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_truledeny
ADD CONSTRAINT syslog_truledeny_pkey PRIMARY KEY (truledeny_id);
--
-- TOC entry 87 (OID 7875283)
-- Name: syslog_trule_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_trule
ADD CONSTRAINT syslog_trule_pkey PRIMARY KEY (trule_id);
--
-- TOC entry 89 (OID 7875285)
-- Name: syslog_tpremadetype_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tpremadetype
ADD CONSTRAINT syslog_tpremadetype_pkey PRIMARY KEY (tpremadetype_id);
--
-- TOC entry 90 (OID 7875287)
-- Name: syslog_tpremadedeny_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tpremadedeny
ADD CONSTRAINT syslog_tpremadedeny_pkey PRIMARY KEY (tpremadedeny_id);
--
-- TOC entry 92 (OID 7875289)
-- Name: syslog_tpremade_pkey; Type: CONSTRAINT; Schema: public; Owner: msyslog
--
ALTER TABLE ONLY syslog_tpremade
ADD CONSTRAINT syslog_tpremade_pkey PRIMARY KEY (tpremade_id);

56
html/data/install
View file

@ -1,10 +1,46 @@
$Id$ CLF Basic Installation.
1. cat pgsql.secframe | psql -Upostgres securityframework 1) Create the Two Postgres Databases and users
2. createdb TSyslog createuser msyslog (with a random password)
3. cat pgsql.msyslog | psql -Upostgres TSyslog createuser secframe (with a random password)
4. adjust php.ini createdb TSyslog
sendmail_path = /usr/sbin/sendmail -i -t -fmailfromsmac@yourdomain.com createdb securityframework
max_execution_time = 295
memory_limit = 16M 2) Create the Schema
5. put the .htaccess file into the correct directory psql -U msyslog -f TSyslog.sql TSyslog
psql -U secframe -f securityframework.sql securityframework
3) Move the files from the HTML directory in the archive to the Servers root directory
(eg: /var/www/html)
4) Move the files from the LIB directory in the archive to a area accessable to the HTTP process
(eg: /var/www/lib)
5) Compile the msyslog program contained in the msyslog-v1.08a+smac directory in the archive.
6) Remove the system syslog program, or disable it.
7) Follow the install instructions to install msyslog program and configure it to log to the TSyslog database using the msyslog username
(we send everything msyslog recieves to the database, but you might want to read the msyslog doco to redirect only certian messages)
7a) setup msyslog to automatically start at boot (edit your rc scripts)
8) Install Mod_Auth_PGSQL from http://www.giuseppetanzilli.it/mod_auth_pgsql/ into apache.
9) Reconfigure the .htaccess file in the root webspace to authenticate with the postgres database with the correct usernames and passwords.
10) To add some users, use secrurityframeworkdata.sql file. Default username/password are clfadmin/password.
11) edit config.php in the webroot directory with the correct values.
12) edit pix.php in the library directory with postgres login information for msyslog and administrator email address
13) edit secframe.php in the library directory with postgres login info for secframe
14) set "register_globals = On" in php.ini file and restart apache. (See TODO)
15) extrace log.d directory in the archive to /etc/log.d
16) edit db.conf with postgres info for TSyslog (Check with Johan on any extra config needed here)
17) Point your browswer at the webserver and login. Consult the help doco for info on setting up new hosts etc.
18) Setup cron to run the scripts/php/processlogs.php every 5 minutes or so. Run by hand to confirm everything is operating correctly after setting up a few hosts in the website.
19) Setup Cron to optionally run:
autovac.php weekly or more, depending on DB size
nightlyrougecheck.php daily (to email the admin about hosts that are sending messages to the CLF that are not configured)
runlogwatch.php to generate the log summary reports daily (at say 1 am, for previous days)
weeklyreport.php to email the log review comments for the previous week (weekly, edit top of file to set email address)
TODO:
---------------------------------
update html code to not require register_globals enabled. (Inherited from SMT code)
re-write archive.php and expire.php to not consume so much memory (they buffer the entire sql result sets, and when you are dealing with databases that are 50 Gig in size, we don't have enough memory to buffer this info in one go.

499
html/data/pgsql.msyslog
View file

@ -1,499 +0,0 @@
/* $Id$ */
/****************************************************/
/* */
/* Table: Syslog_TMail */
/* */
/* Purpose: A TMail entry is made per processor to */
/* watch for stale processors, duplicate */
/* processors, and processor overlap */
/* */
/****************************************************/
CREATE TABLE Syslog_TMail (
TMail_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TMail_Open integer,
TMail_Date date not null,
TMail_Time time not null,
TLogin_ID bigint not null
)\g
grant all on Syslog_TMail to msyslog\g
grant all on syslog_tmail_tmail_id_seq to msyslog\g
CREATE UNIQUE INDEX Syslog_TMail_TLogin_ID on Syslog_TMail (TLogin_ID)\g
ALTER TABLE Syslog_TMail OWNER TO msyslog\g
ALTER TABLE Syslog_TMail SET WITHOUT OIDS\g
/****************************************************/
/* */
/* Table: Syslog_TLaunchQueue */
/* */
/* Purpose: Store launch entries to be run at the */
/* end of processing */
/* */
/****************************************************/
CREATE TABLE Syslog_TLaunchQueue (
TLaunchQueue_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TLaunchQueue_Desc varchar(256),
TLaunch_ID bigint not null,
TMail_ID bigint not null,
TSyslog_ID bigint not null
)\g
grant all on Syslog_TLaunchQueue to msyslog\g
grant all on syslog_tlaunchqueue_tlaunchqueue_id_seq to msyslog\g
ALTER TABLE Syslog_TLaunchQueue OWNER TO msyslog\g
ALTER TABLE Syslog_TLaunchQueue SET WITHOUT OIDS\g
ALTER TABLE syslog_tlaunchqueue alter column tlaunchqueue_desc SET STORAGE EXTERNAL\g
/****************************************************/
/* */
/* Table: Syslog_TSuspend */
/* */
/* Purpose: The table is used to store the suspend */
/* status for log processors */
/* */
/****************************************************/
CREATE TABLE Syslog_TSuspend (
TSuspend_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TSuspend_Status integer not null,
TLogin_ID bigint not null
)\g
ALTER TABLE Syslog_TSuspend OWNER TO msyslog\g
ALTER TABLE Syslog_TSuspend SET WITHOUT OIDS\g
grant all on syslog_tsuspend_tsuspend_id_seq to msyslog\g
/****************************************************/
/* */
/* Table: Syslog_TEMail */
/* */
/* Purpose: Store email entries to be shipped out */
/* at the end of processing */
/* */
/****************************************************/
CREATE TABLE Syslog_TEmail (
TEmail_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TEmail_Email varchar(80) not null,
TEmail_Desc varchar(256),
TMail_ID bigint not null,
TSyslog_ID bigint not null
)\g
grant all on Syslog_TEmail to msyslog\g
grant all on Syslog_TEmail_temail_id_seq to msyslog\g
ALTER TABLE Syslog_TEmail OWNER TO msyslog\g
ALTER TABLE Syslog_TEmail SET WITHOUT OIDS\g
ALTER TABLE syslog_temail alter column temail_email SET STORAGE EXTERNAL\g
ALTER TABLE syslog_temail alter column temail_desc SET STORAGE EXTERNAL\g
/****************************************************/
/* */
/* Table: TSyslog */
/* */
/* Purpose: Syslog messages are submitted directly */
/* to this table. Once messages are processed they */
/* are moved to the archive table */
/* */
/****************************************************/
CREATE TABLE TSyslog (
TSyslog_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
facility integer,
severity integer,
date date,
time time,
host varchar(128),
message text
)\g
CREATE INDEX host_Idx on TSyslog (host)\g
CREATE INDEX TSyslogDateTime_IDX on TSyslog (date,time)\g
CREATE INDEX TSyslHostID_Idx on TSyslog (TSyslog_ID,host)\g
grant all on TSyslog to msyslog\g
grant all on TSyslog_TSyslog_ID_Seq to msyslog\g
ALTER TABLE TSyslog OWNER TO msyslog\g
ALTER TABLE TSyslog SET WITHOUT OIDS\g
ALTER TABLE tsyslog alter column host SET STORAGE EXTERNAL\g
ALTER TABLE tsyslog alter column message SET STORAGE EXTERNAL\g
/****************************************************/
/* */
/* Table: Syslog_TArchive */
/* */
/* Purpose: Syslog messages are moved from the */
/* primary table to the secondary table for long */
/* term storage */
/* */
/****************************************************/
CREATE TABLE Syslog_TArchive (
TSyslog_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
facility integer,
severity integer,
date date,
time time,
host varchar(128),
message text
)\g
CREATE INDEX ArchHost_Idx on Syslog_TArchive (host)\g
CREATE INDEX TArchDateTime_IDX on Syslog_TArchive (date,time)\g
CREATE INDEX TArchHostID_IDX on Syslog_TArchive (TSyslog_ID,host)\g
grant all on Syslog_TArchive to msyslog\g
grant all on syslog_tarchive_tsyslog_id_seq to msyslog\g
ALTER TABLE Syslog_TArchive OWNER TO msyslog\g
ALTER TABLE Syslog_TArchive SET WITHOUT OIDS\g
CREATE TABLE Syslog_TFilter (
TFilter_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TFilter_UserOrGlobal integer not null,
TFilter_Desc varchar(128) not null,
TLogin_ID integer not null
)\g
grant all on Syslog_TFilter to msyslog\g
grant all on Syslog_TFilter_TFilter_ID_Seq to msyslog\g
ALTER TABLE Syslog_TFilter OWNER TO msyslog\g
ALTER TABLE Syslog_TFilter SET WITHOUT OIDS\g
ALTER TABLE syslog_tfilter alter column tfilter_desc SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TFilterData (
TFilterData_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TFilterData_Filter varchar(80),
TFilterData_Include integer,
TFilterData_FilterOrLevel integer,
TFilterData_StartFacility integer,
TFilterData_StopFacility integer,
TFilterData_StartSeverity integer,
TFilterData_StopSeverity integer,
TFilter_ID bigint not null
)\g
grant all on syslog_tfilte_tfilterdata_i_seq to msyslog\g
grant all on Syslog_TFilterData to msyslog\g
ALTER TABLE Syslog_TFilterData OWNER TO msyslog\g
ALTER TABLE Syslog_TFilterData SET WITHOUT OIDS\g
ALTER TABLE syslog_tfilterdata alter column tfilterdata_filter SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TSave (
TSave_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TSave_ExpireDate date not null,
TSave_Desc varchar(128),
TSave_Time time not null,
TSave_Date date not null,
TLogin_ID integer not null
)\g
grant all on Syslog_TSave_TSave_ID_Seq to msyslog\g
grant all on Syslog_TSave to msyslog\g
ALTER TABLE Syslog_TSave OWNER TO msyslog\g
ALTER TABLE Syslog_TSave SET WITHOUT OIDS\g
ALTER TABLE syslog_tsave alter column tsave_desc SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TSaveData (
TSaveData_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TSaveData_Date date not null,
TSaveData_Time time not null,
TSaveData_Host varchar(128) not null,
TSaveData_Message text not null,
TSaveData_Facility integer,
TSaveData_Severity integer,
TSave_ID bigint not null
)\g
CREATE INDEX TSaveData_SaveID_Idx on Syslog_TSaveData (TSave_ID)\g
grant all on syslog_tsaveda_tsavedata_id_seq to msyslog\g
grant all on Syslog_TSaveData to msyslog\g
ALTER TABLE Syslog_TSaveData OWNER TO msyslog\g
ALTER TABLE Syslog_TSaveData SET WITHOUT OIDS\g
ALTER TABLE syslog_tsavedata alter column tsavedata_host SET STORAGE EXTERNAL\g
ALTER TABLE syslog_tsavedata alter column tsavedata_message SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TProcess (
TProcess_ID bigint,
THost_ID bigint not null
)\g
grant all on Syslog_TProcess to msyslog\g
ALTER TABLE Syslog_TProcess OWNER TO msyslog\g
ALTER TABLE Syslog_TProcess SET WITHOUT OIDS\g
insert into Syslog_TProcess values (0,1);
insert into Syslog_TProcess values (0,2);
insert into Syslog_TProcess values (0,3);
insert into Syslog_TProcess values (0,4);
insert into Syslog_TProcess values (0,5);
insert into Syslog_TProcess values (0,6);
insert into Syslog_TProcess values (0,7);
CREATE TABLE Syslog_THost (
THost_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
THost_Host varchar(128) not null,
THost_AlertExpire integer,
THost_LogExpire integer,
THost_Rate bigint,
TPremadeType_ID bigint not null
)\g
grant all on Syslog_THost to msyslog\g
grant all on Syslog_THost_THost_ID_Seq to msyslog\g
ALTER TABLE Syslog_THost OWNER TO msyslog\g
ALTER TABLE Syslog_THost SET WITHOUT OIDS\g
ALTER TABLE syslog_thost alter column thost_host SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TProcessorProfile (
TProcessorProfile_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
THost_ID bigint not null,
TLogin_ID bigint not null
)\g
CREATE INDEX TProcessorProfile_TLogin_ID_Idx on Syslog_TProcessorProfile (TLogin_ID)\g
grant all on syslog_tproce_tprocessorpro_seq to msyslog\g
grant all on Syslog_TProcessorProfile to msyslog\g
ALTER TABLE Syslog_TProcessorProfile OWNER TO msyslog\g
ALTER TABLE Syslog_TProcessorProfile SET WITHOUT OIDS\g
insert into syslog_tprocessorprofile (THost_ID,TLogin_ID) values (7,3);
CREATE TABLE Syslog_TCustomerProfile (
TCustomerProfile_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TCustomerProfile_EditRules bigint,
THost_ID bigint not null,
TLogin_ID bigint not null
)\g
CREATE INDEX TCustomerProfile_TLogin_ID_Idx on Syslog_TCustomerProfile (TLogin_ID)\g
grant all on syslog_tcusto_tcustomerprof_seq to msyslog\g
grant all on Syslog_TCustomerProfile to msyslog\g
ALTER TABLE Syslog_TCustomerProfile OWNER TO msyslog\g
ALTER TABLE Syslog_TCustomerProfile SET WITHOUT OIDS\g
CREATE TABLE Syslog_TLaunch (
TLaunch_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TLaunch_Program text not null,
TLaunch_LongDesc text not null,
TLaunch_ShortDesc varchar(30) not null
)\g
CREATE UNIQUE INDEX TLaunch_ShortDesc_Idx on Syslog_TLaunch (TLaunch_ShortDesc)\g
grant all on syslog_tlaunch_tlaunch_id_seq to msyslog\g
grant all on Syslog_TLaunch to msyslog\g
ALTER TABLE Syslog_TLaunch OWNER TO msyslog\g
ALTER TABLE Syslog_TLaunch SET WITHOUT OIDS\g
ALTER TABLE syslog_tlaunch alter column tlaunch_program SET STORAGE EXTERNAL\g
ALTER TABLE syslog_tlaunch alter column tlaunch_longdesc SET STORAGE EXTERNAL\g
ALTER TABLE syslog_tlaunch alter column tlaunch_shortdesc SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TAlert (
TAlert_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TAlert_Date date,
TAlert_Time time,
TAlert_Info varchar(80),
TSyslog_ID bigint
)\g
CREATE UNIQUE INDEX TAlert_TSyslog_ID_idx on Syslog_TAlert (TSyslog_ID)\g
grant all on Syslog_TAlert_TAlert_ID_Seq to msyslog\g
grant all on Syslog_TAlert to msyslog\g
ALTER TABLE Syslog_TAlert OWNER TO msyslog\g
ALTER TABLE Syslog_TAlert SET WITHOUT OIDS\g
ALTER TABLE syslog_talert alter column talert_info SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TRuleDeny (
TRuleDeny_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TRuleDeny_Expression varchar(80) not null,
TRuleDeny_StartFacility integer,
TRuleDeny_StopFacility integer,
TRuleDeny_StartSeverity integer,
TRuleDeny_StopSeverity integer,
TRule_ID bigint
)\g
grant all on syslog_trulede_truledeny_id_seq to msyslog\g
grant all on Syslog_TRuleDeny to msyslog\g
CREATE INDEX TRule_ID_DENY_Idx on Syslog_TRuleDeny (TRule_ID)\g
ALTER TABLE Syslog_TRuleDeny OWNER TO msyslog\g
ALTER TABLE Syslog_TRuleDeny SET WITHOUT OIDS\g
ALTER TABLE syslog_truledeny alter column truledeny_expression SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TRule (
TRule_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TRule_LogAlert integer,
TRule_Email varchar(80),
TRule_Expression varchar(80),
TRule_Desc varchar(256),
TRule_RuleOrLevel integer,
TRule_StartFacility integer,
TRule_StopFacility integer,
TRule_StartSeverity integer,
TRule_StopSeverity integer,
TRule_Threshold integer,
TRule_ThresholdType integer,
TRule_StartTime bigint,
TRule_EndTime bigint,
TRule_TimerType integer,
TRule_DaysofWeek integer,
TLaunch_ID bigint,
THost_ID bigint not null
)\g
CREATE INDEX TRule_host_Idx on Syslog_TRule (THost_ID)\g
grant all on Syslog_TRule_TRule_ID_Seq to msyslog\g
grant all on Syslog_TRule to msyslog\g
ALTER TABLE Syslog_TRule OWNER TO msyslog\g
ALTER TABLE Syslog_TRule SET WITHOUT OIDS\g
ALTER TABLE syslog_trule alter column trule_email SET STORAGE EXTERNAL\g
ALTER TABLE syslog_trule alter column trule_expression SET STORAGE EXTERNAL\g
ALTER TABLE syslog_trule alter column trule_desc SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TPremadeType (
TPremadeType_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TPremadeType_Desc varchar(40) not null
)\g
grant all on syslog_tprema_tpremadetype__seq to msyslog\g
grant all on Syslog_TPremadeType to msyslog\g
ALTER TABLE Syslog_TPremadeType OWNER TO msyslog\g
ALTER TABLE Syslog_TPremadeType SET WITHOUT OIDS\g
ALTER TABLE syslog_tpremadetype alter column tpremadetype_desc SET STORAGE EXTERNAL\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Cisco Firewalls')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Cisco Routers')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Cisco Switches')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Cisco VPN Devices')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Cisco Local Directors')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Cisco Content Services Switch')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Linux Host')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Solaris Host')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('Windows Host')\g
insert into Syslog_TPremadeType (TPremadeType_Desc) values ('NetApp')\g
CREATE TABLE Syslog_TPremadeDeny (
TPremadeDeny_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TPremadeDeny_Expression varchar(80) not null,
TPremadeDeny_StartFacility integer,
TPremadeDeny_StopFacility integer,
TPremadeDeny_StartSeverity integer,
TPremadeDeny_StopSeverity integer,
TPremade_ID bigint
)\g
grant all on syslog_tprema_tpremadedeny__seq to msyslog\g
grant all on Syslog_TPremadeDeny to msyslog\g
CREATE INDEX TPremade_ID_DENY_Idx on Syslog_TPremadeDeny (TPremade_ID)\g
ALTER TABLE Syslog_TPremadeDeny OWNER TO msyslog\g
ALTER TABLE Syslog_TPremadeDeny SET WITHOUT OIDS\g
ALTER TABLE syslog_tpremadedeny alter column tpremadedeny_expression SET STORAGE EXTERNAL\g
CREATE TABLE Syslog_TPremade (
TPremade_ID bigserial UNIQUE NOT NULL PRIMARY KEY,
TPremade_Code varchar(80) not null,
TPremade_Desc text,
TPremade_PremadeOrLevel integer,
TPremade_StartFacility integer,
TPremade_StopFacility integer,
TPremade_StartSeverity integer,
TPremade_StopSeverity integer,
TPremadeType_ID bigint,
TPremade_Threshold integer,
TPremade_ThresholdType integer,
TLaunch_ID bigint
)\g
CREATE INDEX TPremadeType_ID2_Idx on Syslog_TPremade (TPremadeType_ID)\g
ALTER TABLE Syslog_TPremade OWNER TO msyslog\g
ALTER TABLE Syslog_TPremade SET WITHOUT OIDS\g
ALTER TABLE syslog_tpremade alter column tpremade_code SET STORAGE EXTERNAL\g
ALTER TABLE syslog_tpremade alter column tpremade_desc SET STORAGE EXTERNAL\g
grant all on Syslog_TPremade to msyslog\g
grant all on Syslog_TPremade_TPremade_ID_Seq to msyslog\g
insert into Syslog_TPremade (TPremadeType_ID,TPremade_Code,TPremade_Desc) values (1,'%PIX-1-101002:','(Primary) Bad failover cable.')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('V6.X Cisco Pix Rules',0,0,1)\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-1-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-2-201003')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-3-201008')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-3-202001')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-3-211001')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-3-211003')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-5-199001')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-6-199002')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,1,'%PIX-6-199005')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('V4.2 Cisco LocalDirector Rules',0,0,5)\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Error reading cable status')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Failover communications failure')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Link status')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Lost Failover communications with mate')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Mate reporting failure')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Mate says *.* failed')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'No response from mate')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Power failure other side')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'SYN attack')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Switching to')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,2,'Testing on interface')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('V5.X Cisco Content Switch Rules',0,0,6)\g
#insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,3,'')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('Cisco IOS Router Rules',0,0,2)\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%BGP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%C5RSP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%C6KENV-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%C6KPWR-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%C6MSFC-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%C7200')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%CONTROLLER-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%CRYPTO-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%DHCPD-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%DIALER-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%DMA-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%DTP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%DUAL-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%DVMRP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%EC-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%ENVM-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%FIB-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%FILESYS-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%FLASH-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%FR-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%FW-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%FX1000-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%GRP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%GRPGE-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%HW_VPN-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%I82543-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%IDS-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%IPC-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%IPFAST-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%IPFLOW-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%IPRT-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%IP_SNMP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%ISA-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%ISDN-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%LINK-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%MCAST-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%MEMSCAN-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%OIR-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%OOBP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%OSPF-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%PA-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%PLATFORM-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%PPP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%PQUICC_ETHER-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%PQUICC_FE-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%QUICC_ETHER-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%QUICC_SERIAL-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SERVICE_MODULE-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SNMP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SPANTREE-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%STANDBY-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SW_VLAN-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SYS-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SYSCTLR-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%SYSMGT_RPC-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%TBRIDGE-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%TCP-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%TR-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%TUN-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%UCODE-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%UDLD-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%VPDN-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,4,'%WCCP-5-CACHEFOUND')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,3,0,23,0,7,4,'')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('Cisco IOS Switch Rules',0,0,3)\g
#insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,5,'')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('Cisco CatOS Switch Rules',0,0,3)\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%IP-[346]')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%EARL-')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%KERNEL-1-CREATEPROCESSFAILED')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%SECURITY-[1357]')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%SYS-[0-7]')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%CDP-4-DUPLEXMISMATCH')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%SNMP-5-COLDSTART')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%SNMP-5-WARMSTART')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%PAGP-5-PORTTOSTP')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,1,0,23,0,7,6,'%PAGP-5-PORTFROMSTP')\g
insert into Syslog_TRule (TRule_LogAlert,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID,TRule_Expression) values (1,3,0,23,0,7,6,'')\g
insert into Syslog_THost (THost_Host,THost_AlertExpire,THost_LogExpire,TPremadeType_ID) values ('localhost',2419200,2419200,7);
insert into Syslog_TRule (TRule_LogAlert,TRule_Email,TRule_Expression,TRule_Desc,TRule_RuleOrLevel,TRule_StartFacility,TRule_StopFacility,TRule_StartSeverity,TRule_StopSeverity,THost_ID) values (1,'root@localhost','',' Default catch-most rule',3,0,23,0,3,7);

5
html/data/pgsql.secframe
View file

@ -1,5 +0,0 @@
/* $Id$ */
insert into SecFrame_TGroup (TGroup_Name,TGroup_Desc) values ('Syslog Customer','Customers of Syslog System')\g
insert into SecFrame_TGroup (TGroup_Name,TGroup_Desc) values ('Syslog Analyst','NOC Analyst')\g
insert into SecFrame_TGroup (TGroup_Name,TGroup_Desc) values ('Syslog Administrators','Syslog Adminstrator')\g
insert into SecFrame_TGroup (TGroup_Name,TGroup_Desc) values ('Syslog msyslog','Syslog Processor')\g

380
html/data/securityframework.sql Normal file
View file

@ -0,0 +1,380 @@
--
-- PostgreSQL database dump
--
\connect - secframe
--
-- TOC entry 1 (OID 0)
-- Name: securityframework; Type: DATABASE; Schema: -; Owner: secframe
--
CREATE DATABASE securityframework WITH TEMPLATE = template0 ENCODING = 0;
\connect securityframework secframe
SET search_path = public, pg_catalog;
--
-- TOC entry 2 (OID 7875318)
-- Name: tqueue_seq; Type: SEQUENCE; Schema: public; Owner: secframe
--
CREATE SEQUENCE tqueue_seq
START 1
INCREMENT 1
MAXVALUE 9223372036854775807
MINVALUE 1
CACHE 1;
--
-- TOC entry 3 (OID 7875318)
-- Name: tqueue_seq; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE tqueue_seq FROM PUBLIC;
--
-- TOC entry 14 (OID 7875320)
-- Name: secframe_tqueue; Type: TABLE; Schema: public; Owner: secframe
--
CREATE TABLE secframe_tqueue (
tqueue_id integer DEFAULT nextval('TQueue_Seq'::text),
tqueue_command character varying(16) NOT NULL,
tqueue_date date NOT NULL,
tqueue_time time without time zone NOT NULL,
tqueue_dateprocessed date,
tqueue_timeprocessed time without time zone,
tqueue_processed integer,
tqueue_data1 text,
tqueue_data2 text
);
--
-- TOC entry 15 (OID 7875320)
-- Name: secframe_tqueue; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE secframe_tqueue FROM PUBLIC;
--
-- TOC entry 4 (OID 7875326)
-- Name: tlogin_seq; Type: SEQUENCE; Schema: public; Owner: secframe
--
CREATE SEQUENCE tlogin_seq
START 1
INCREMENT 1
MAXVALUE 9223372036854775807
MINVALUE 1
CACHE 1;
--
-- TOC entry 5 (OID 7875326)
-- Name: tlogin_seq; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE tlogin_seq FROM PUBLIC;
--
-- TOC entry 16 (OID 7875328)
-- Name: secframe_tlogin; Type: TABLE; Schema: public; Owner: secframe
--
CREATE TABLE secframe_tlogin (
tlogin_id integer DEFAULT nextval('TLogin_Seq'::text),
tlogin_username character varying(128) NOT NULL,
tlogin_password character varying(32) NOT NULL,
tlogin_name character varying(40) NOT NULL,
tlogin_email character varying(40) NOT NULL,
tlogin_home character varying(20),
tlogin_work character varying(20),
tlogin_cell character varying(20),
tlogin_pager character varying(20),
tlogin_address1 character varying(40),
tlogin_address2 character varying(40),
tlogin_city character varying(40),
tlogin_state character varying(2),
tlogin_zip character varying(12)
);
--
-- TOC entry 17 (OID 7875328)
-- Name: secframe_tlogin; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE secframe_tlogin FROM PUBLIC;
--
-- TOC entry 6 (OID 7875331)
-- Name: tgroup_seq; Type: SEQUENCE; Schema: public; Owner: secframe
--
CREATE SEQUENCE tgroup_seq
START 1
INCREMENT 1
MAXVALUE 9223372036854775807
MINVALUE 1
CACHE 1;
--
-- TOC entry 7 (OID 7875331)
-- Name: tgroup_seq; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE tgroup_seq FROM PUBLIC;
--
-- TOC entry 18 (OID 7875333)
-- Name: secframe_tgroup; Type: TABLE; Schema: public; Owner: secframe
--
CREATE TABLE secframe_tgroup (
tgroup_id integer DEFAULT nextval('TGroup_Seq'::text),
tgroup_name character varying(30) NOT NULL,
tgroup_desc character varying(80) NOT NULL
);
--
-- TOC entry 19 (OID 7875333)
-- Name: secframe_tgroup; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE secframe_tgroup FROM PUBLIC;
--
-- TOC entry 8 (OID 7875336)
-- Name: tgroupmembers_seq; Type: SEQUENCE; Schema: public; Owner: secframe
--
CREATE SEQUENCE tgroupmembers_seq
START 1
INCREMENT 1
MAXVALUE 9223372036854775807
MINVALUE 1
CACHE 1;
--
-- TOC entry 9 (OID 7875336)
-- Name: tgroupmembers_seq; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE tgroupmembers_seq FROM PUBLIC;
--
-- TOC entry 20 (OID 7875338)
-- Name: secframe_tgroupmembers; Type: TABLE; Schema: public; Owner: secframe
--
CREATE TABLE secframe_tgroupmembers (
tgroupmembers_id integer DEFAULT nextval('TGroupMembers_Seq'::text),
tlogin_id integer NOT NULL,
tgroup_id integer NOT NULL
);
--
-- TOC entry 21 (OID 7875338)
-- Name: secframe_tgroupmembers; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE secframe_tgroupmembers FROM PUBLIC;
--
-- TOC entry 10 (OID 7875341)
-- Name: tapp_seq; Type: SEQUENCE; Schema: public; Owner: secframe
--
CREATE SEQUENCE tapp_seq
START 1
INCREMENT 1
MAXVALUE 9223372036854775807
MINVALUE 1
CACHE 1;
--
-- TOC entry 11 (OID 7875341)
-- Name: tapp_seq; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE tapp_seq FROM PUBLIC;
--
-- TOC entry 22 (OID 7875343)
-- Name: secframe_tapp; Type: TABLE; Schema: public; Owner: secframe
--
CREATE TABLE secframe_tapp (
tapp_id integer DEFAULT nextval('TApp_Seq'::text),
tapp_name character varying(30) NOT NULL,
tapp_desc character varying(80) NOT NULL
);
--
-- TOC entry 23 (OID 7875343)
-- Name: secframe_tapp; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE secframe_tapp FROM PUBLIC;
--
-- TOC entry 12 (OID 7875346)
-- Name: tappperm_seq; Type: SEQUENCE; Schema: public; Owner: secframe
--
CREATE SEQUENCE tappperm_seq
START 1
INCREMENT 1
MAXVALUE 9223372036854775807
MINVALUE 1
CACHE 1;
--
-- TOC entry 13 (OID 7875346)
-- Name: tappperm_seq; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE tappperm_seq FROM PUBLIC;
--
-- TOC entry 24 (OID 7875348)
-- Name: secframe_tappperm; Type: TABLE; Schema: public; Owner: secframe
--
CREATE TABLE secframe_tappperm (
tappperm_id integer DEFAULT nextval('TAppPerm_Seq'::text),
tappperm_usergroup integer NOT NULL,
tappperm_ugid integer NOT NULL,
tappperm_allowaccess integer NOT NULL,
tappperm_priority integer NOT NULL,
tapp_id integer NOT NULL
);
--
-- TOC entry 25 (OID 7875348)
-- Name: secframe_tappperm; Type: ACL; Schema: public; Owner: secframe
--
REVOKE ALL ON TABLE secframe_tappperm FROM PUBLIC;
--
-- TOC entry 27 (OID 7875383)
-- Name: tqueue_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tqueue_id_idx ON secframe_tqueue USING btree (tqueue_id);
--
-- TOC entry 26 (OID 7875384)
-- Name: tqueue_command_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE INDEX tqueue_command_idx ON secframe_tqueue USING btree (tqueue_command);
--
-- TOC entry 28 (OID 7875385)
-- Name: tlogin_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tlogin_id_idx ON secframe_tlogin USING btree (tlogin_id);
--
-- TOC entry 29 (OID 7875386)
-- Name: tlogin_username_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tlogin_username_idx ON secframe_tlogin USING btree (tlogin_username);
--
-- TOC entry 30 (OID 7875387)
-- Name: tgroup_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tgroup_id_idx ON secframe_tgroup USING btree (tgroup_id);
--
-- TOC entry 31 (OID 7875388)
-- Name: tgroupmembers_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tgroupmembers_id_idx ON secframe_tgroupmembers USING btree (tgroupmembers_id);
--
-- TOC entry 32 (OID 7875389)
-- Name: tapp_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tapp_id_idx ON secframe_tapp USING btree (tapp_id);
--
-- TOC entry 34 (OID 7875390)
-- Name: tappperm_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE UNIQUE INDEX tappperm_id_idx ON secframe_tappperm USING btree (tappperm_id);
--
-- TOC entry 37 (OID 7875391)
-- Name: tappperm_usergroup_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE INDEX tappperm_usergroup_idx ON secframe_tappperm USING btree (tappperm_usergroup);
--
-- TOC entry 36 (OID 7875392)
-- Name: tappperm_ugid_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE INDEX tappperm_ugid_idx ON secframe_tappperm USING btree (tappperm_ugid);
--
-- TOC entry 33 (OID 7875393)
-- Name: tappperm_allowaccess_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE INDEX tappperm_allowaccess_idx ON secframe_tappperm USING btree (tappperm_allowaccess);
--
-- TOC entry 35 (OID 7875394)
-- Name: tappperm_tapp_id_idx; Type: INDEX; Schema: public; Owner: secframe
--
CREATE INDEX tappperm_tapp_id_idx ON secframe_tappperm USING btree (tapp_id);

129
html/data/securityframeworkdata.sql Normal file
View file

@ -0,0 +1,129 @@
--
-- PostgreSQL database dump
--
\connect - secframe
SET search_path = public, pg_catalog;
--
-- Data for TOC entry 7 (OID 7875320)
-- Name: secframe_tqueue; Type: TABLE DATA; Schema: public; Owner: secframe
--
COPY secframe_tqueue (tqueue_id, tqueue_command, tqueue_date, tqueue_time, tqueue_dateprocessed, tqueue_timeprocessed, tqueue_processed, tqueue_data1, tqueue_data2) FROM stdin;
\.
--
-- Data for TOC entry 8 (OID 7875328)
-- Name: secframe_tlogin; Type: TABLE DATA; Schema: public; Owner: secframe
--
COPY secframe_tlogin (tlogin_id, tlogin_username, tlogin_password, tlogin_name, tlogin_email, tlogin_home, tlogin_work, tlogin_cell, tlogin_pager, tlogin_address1, tlogin_address2, tlogin_city, tlogin_state, tlogin_zip) FROM stdin;
3 msyslog 5f4dcc3b5aa765d61d8327deb882cf99 msyslog User root@localhost
1 clfadmin 5f4dcc3b5aa765d61d8327deb882cf99 Sample User samplemail@yahoo.com
\.
--
-- Data for TOC entry 9 (OID 7875333)
-- Name: secframe_tgroup; Type: TABLE DATA; Schema: public; Owner: secframe
--
COPY secframe_tgroup (tgroup_id, tgroup_name, tgroup_desc) FROM stdin;
1 Everyone All Users
3 Normal Users Standard System Users
2 Administrators System Administrators
8 Syslog Customer Customers of Syslog System
9 Syslog Analyst NOC Analyst
10 Syslog Administrators Syslog Adminstrator
11 Syslog msyslog Syslog Processor
\.
--
-- Data for TOC entry 10 (OID 7875338)
-- Name: secframe_tgroupmembers; Type: TABLE DATA; Schema: public; Owner: secframe
--
COPY secframe_tgroupmembers (tgroupmembers_id, tlogin_id, tgroup_id) FROM stdin;
1 1 1
2 1 2
3 1 3
8 3 1
11 1 10
16 3 11
\.
--
-- Data for TOC entry 11 (OID 7875343)
-- Name: secframe_tapp; Type: TABLE DATA; Schema: public; Owner: secframe
--
COPY secframe_tapp (tapp_id, tapp_name, tapp_desc) FROM stdin;
1 User Administrators Administrators Access-List
2 SyslogOp Syslog Access-List
\.
--
-- Data for TOC entry 12 (OID 7875348)
-- Name: secframe_tappperm; Type: TABLE DATA; Schema: public; Owner: secframe
--
COPY secframe_tappperm (tappperm_id, tappperm_usergroup, tappperm_ugid, tappperm_allowaccess, tappperm_priority, tapp_id) FROM stdin;
1 2 1 0 1 2
6 2 1 1 2 2
\.
--
-- TOC entry 1 (OID 7875318)
-- Name: tqueue_seq; Type: SEQUENCE SET; Schema: public; Owner: secframe
--
SELECT pg_catalog.setval ('tqueue_seq', 1, false);
--
-- TOC entry 2 (OID 7875326)
-- Name: tlogin_seq; Type: SEQUENCE SET; Schema: public; Owner: secframe
--
SELECT pg_catalog.setval ('tlogin_seq', 41, true);
--
-- TOC entry 3 (OID 7875331)
-- Name: tgroup_seq; Type: SEQUENCE SET; Schema: public; Owner: secframe
--
SELECT pg_catalog.setval ('tgroup_seq', 11, true);
--
-- TOC entry 4 (OID 7875336)
-- Name: tgroupmembers_seq; Type: SEQUENCE SET; Schema: public; Owner: secframe
--
SELECT pg_catalog.setval ('tgroupmembers_seq', 60, true);
--
-- TOC entry 5 (OID 7875341)
-- Name: tapp_seq; Type: SEQUENCE SET; Schema: public; Owner: secframe
--
SELECT pg_catalog.setval ('tapp_seq', 2, true);
--
-- TOC entry 6 (OID 7875346)
-- Name: tappperm_seq; Type: SEQUENCE SET; Schema: public; Owner: secframe
--
SELECT pg_catalog.setval ('tappperm_seq', 38, true);