Hi Jochen,
My graylog collector configuration is
here: https://gist.github.com/mcgurksean/20c1f62b9bd77d279357
Log shows:
2015-11-16T17:29:31.095+0000 INFO [main] cli.commands.Run - Starting
Collector v0.4.1 (commit 36a0856)
2015-11-16T17:29:31.098+0000 INFO [main] cli.commands.Run - Running on
Ubuntu 14.04.2 LTS (trusty) Linux 3.13.0-48-generic (amd64)
2015-11-16T17:29:32.204+0000 INFO [main] collector.utils.CollectorId -
Collector ID: 6231abc8-341a-4e4a-867c-177351dfcc0e
2015-11-16T17:29:32.252+0000 INFO [main] outputs.gelf.GelfOutput -
Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@320da5ed
2015-11-16T17:29:32.466+0000 INFO [main] cli.commands.Run - Service
RUNNING: BufferProcessor [RUNNING]
2015-11-16T17:29:32.466+0000 INFO [main] cli.commands.Run - Service
RUNNING: FileObserver [RUNNING]
2015-11-16T17:29:32.466+0000 INFO [main] cli.commands.Run - Service
RUNNING: MemoryReporterService [RUNNING]
2015-11-16T17:29:32.466+0000 INFO [main] cli.commands.Run - Service
RUNNING: MetricService [RUNNING]
2015-11-16T17:29:32.466+0000 INFO [main] cli.commands.Run - Service
RUNNING: HeartbeatService [RUNNING]
2015-11-16T17:29:32.472+0000 INFO [main] cli.commands.Run - Service
RUNNING: FileInput{id='syslog',
path-set='SinglePathSet{path=/var/log/syslog}',
reader-buffer-size='102400', message-fields='MessageFields{}',
charset='UTF-8', outputs='', content-splitter='NEWLINE',
reader-interval='100'}
2015-11-16T17:29:32.473+0000 INFO [main] cli.commands.Run - Service
RUNNING: StdoutOutput{id='console', inputs=''}
2015-11-16T17:29:32.474+0000 INFO [main] cli.commands.Run - Service
RUNNING: GelfOutput{port='12201', id='graylog-server',
client-send-buffer-size='-1', host='xxx.xxx.xxx.xxx', inputs='',
client-reconnect-delay='1000', client-connect-timeout='5000',
client-tcp-no-delay='true', client-queue-size='512'}
2015-11-16T17:29:32.477+0000 ERROR [gelfTcpTransport-1-1]
gelfclient.transport.GelfTcpTransport - Connection failed: Connection
refused: /xxx.xxx.xxx.xxx:12201
2015-11-16T17:29:33.478+0000 ERROR [gelfTcpTransport-1-1]
gelfclient.transport.GelfTcpTransport - Connection failed: Connection
refused: /xxx.xxx.xxx.xxx:12201
2015-11-16T17:29:34.480+0000 ERROR [gelfTcpTransport-1-1]
gelfclient.transport.GelfTcpTransport - Connection failed: Connection
refused: /xxx.xxx.xxx.xxx:12201
Thanks,
Seán
On Sunday, 15 November 2015 09:37:26 UTC, Sean McGurk wrote:
>
> Hi,
>
> I am trying to create a Graylog Server - Graylog Collector setup, where
> the graylog collector collects the syslog files on one machine and ships
> them to the server.
>
> I have used the AWS AMI to create the Graylog Server and it is working as
> expected.
>
> I installed a Graylog Collector on the same machine and I am able to see
> it in the list of sources for that instance.
>
> My problem is when I try and connect to a remote Graylog Collector.
>
> The Graylog Collector configuration file looks like this:
>
> server-url = "http://xxx.xxx.xxx.xxx:12900/";
>
> inputs {
> syslog {
> type = "file"
> path = "/var/log/syslog"
> }
> }
>
> outputs {
> graylog-server {
> type = "gelf"
> host = "xxx.xxx.xxx.xxx"
> port = 12201
> }
> }
>
> where xxx.xxx.xxx.xxx is the private IP address of the graylog server I am
> attempting to connect to.
>
> An extract from the configuration of the graylog server is:
>
> rest_listen_uri = http://0.0.0.0:12900/
>
> And the security groups for both instances are as follows:
>
> Type Protocol Port Range Source
> Custom TCP Rule TCP 12201 0.0.0.0/0
> Custom TCP Rule TCP 12900 0.0.0.0/0
>
> When I look at the logs for the graylog collector, I get the following
> messages:
>
> 2015-11-14T23:41:33.948+0000 ERROR [gelfTcpTransport-1-1]
> gelfclient.transport.GelfTcpTransport - Connection failed: Connection
> refused: /xxx.xxx.xxx.xxx:12201
> 2015-11-14T23:41:34.949+0000 ERROR [gelfTcpTransport-1-1]
> gelfclient.transport.GelfTcpTransport - Connection failed: Connection
> refused: /xxx.xxx.xxx.xxx:12201
> 2015-11-14T23:41:35.951+0000 ERROR [gelfTcpTransport-1-1]
> gelfclient.transport.GelfTcpTransport - Connection failed: Connection
> refused: /xxx.xxx.xxx.xxx:12201
> 2015-11-14T23:41:36.953+0000 ERROR [gelfTcpTransport-1-1]
> gelfclient.transport.GelfTcpTransport - Connection failed: Connection
> refused: /xxx.xxx.xxx.xxx:12201
> 2015-11-14T23:41:37.956+0000 ERROR [gelfTcpTransport-1-1]
> gelfclient.transport.GelfTcpTransport - Connection failed: Connection
> refused: /xxx.xxx.xxx.xxx:12201
> 2015-11-14T23:41:38.698+0000 WARN [HeartbeatService RUNNING]
> collector.heartbeat.HeartbeatService - Unable to send heartbeat to Graylog
> server: ConnectException: Connection refused
>
> (again xxx.xxx.xxx.xxx is the private IP address of the graylog server I
> am attempting to connect to)
>
> I have run a traceroute between the 2 machines on port 12201 and port
> 12900 without any problems.
>
> Can anyone tell me what I might be missing in my configuration to allow
> these 2 to connect?
>
> Both are running Ubuntu 14.04.
>
> Thanks,
>
> Seán
>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/1c98bc0b-7a3d-4f9d-8668-329ed1fa6d9a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
