Funny, the actual thing that's preventing it is pointed out in your log 
apparmor="DENIED\" operation=\"open\" parent=1 profile=\"/usr/sbin/mysqld\" name=\"/tmp/logzilla_import.txt\" pid=23567 comm=\"mysqld\" requested_mask=\"r\" denied_mask=\"r\" fsuid=102 ouid=0 3751981041 2010
The problem is apparmor - try disabling it.
WORKS! It was Apparmor, i didn't see that entry in log, incredible...
Only a question more, i had to relaunch manually sphinxd for searching, from now will it update indexes automatically?
THANKS!
Still a problem.System: SUSE Enterprise Server 11 SP1 (64-bit)
MySQL version: 5.0.67
PHP version: 5.2.6
Apparmor: Disable
Logzilla: Php-Syslog-NG 2.9.9o [ cdukes ]
cat /var/log/logzilla/syslog_dump.log | /srv/www/htdocs/logzilla/scripts/db_insert.pl -d8 -vError: Error inserting record mail 30 squid 1315908770.249 174 192.168.1.68 TCP_REFRESH_HIT/200 7619 GET
http://platform.twitter.com/widgets.js vitoon.sripa DEFAULT_PARENT/192.168.1.1 application/javascript
Total processing time was 0 wallclock secs ( 0.00 usr 0.00 sys + 0.02 cusr 0.01 csys = 0.03 CPU) seconds
Waiting for child on PID 7517 to exit...
INCOMING MESSAGE:
mail 30 squid 1315908770.274 339 192.168.1.68 TCP_MISS/200 4041 GET
http://d1.openx.org/afr.php? user.a DEFAULT_PARENT/192.168.1.1 text/html
INVALID MESSAGE FORMAT:
mail 30 squid 1315908770.274 339 192.168.1.68 TCP_MISS/200 4041 GET
http://d1.openx.org/afr.php? user.a DEFAULT_PARENT/192.168.1.1 text/html
Error inserting record mail 30 squid 1315908770.274 339 192.168.1.68 TCP_MISS/200 4041 GET
http://d1.openx.org/afr.php? vitoon.sripa DEFAULT_PARENT/192.168.1.1 text/html
Total processing time was 0 wallclock secs ( 0.00 usr 0.00 sys + 0.03 cusr 0.00 csys = 0.03 CPU) seconds
------------------------------------------
On Php-syslog-ng webbase
Hostname match - empty host
Program match - empty host
But, On MySQL Database have data log.
And, When I click "Tail" button. Host is show (
mail is host)
What's wrong? Hosts Programs not inserting