Cacti – Syslog-NG – Duplicate Entry For Key

If you notice that your alerts stop coming in from syslog or notice that your syslog isn’t showing any results, then check to make sure the syslog-ng service is running.

service syslog-ng status

If it is running, then try restarting it.

service syslog-ng restart

If you are having the same issues I have, then you will see the following

[root@cacti ~]# service syslog-ng start
ERROR 1062 (23000) at line 1: Duplicate entry '4294967295' for key 1

The incoming table has some kind of key issue…and it looks like the table has maxed out. Lets simply reset it.

From the CLI, do the following:
Enter mysql and clear the syslog incoming table:

mysql
use syslog
delete from syslog_incoming;

Now I reset the auto increment value:

mysql> alter table syslog_incoming AUTO_INCREMENT=1;
Query OK, 0 rows affected (0.00 sec)
Records: 0  Duplicates: 0  Warnings: 0

Then try starting the service:

[root@cacti ~]# service syslog-ng start
Starting system logger:                                    [  OK  ]