Hi all,
Graylog data collector is not sending messages to the server.
graylog-server: X.X.X.X.X
graylog-data-collector: Y.Y.Y.Y
was able to push message to the server and is listing on graylog server
using:
echo -e '{"version":
"1.1","host":"test111.fdsfdsfdsfsdf.org","short_message":"Short
message","full_message":"Backtrace here\n\nmore
stuff","level":1,"_user_id":900111,"_some_info":"foo","_some_env_var":"bar"}\0'
| nc -w 1 X.X.X.X 12201
Many TIA in advance.
Collector.conf
=============
server-url = "http://X.X.X.X:12900/";
collector-id = "file:/etc/graylog/collector/collector-id"
inputs {
Reverse-proxy-logs {
type = "file"
path-glob-root = "/var/log/SOME"
path-glob-pattern = "*.{access,error}.log"
outputs = "gelf-1,gelf-2,console"
}
}
outputs {
gelf-1 {
type = "gelf"
host = "X.X.X.X"
port = 12201
}
gelf-2 {
type = "gelf"
host = "X.X.X.X"
port = 12201
}
console {
type = "stdout"
input = "Reverse-proxy-logs"
}
}
=============
Telnet result gray log cllector:
============
[email protected]:~# telnet X.X.X.X 12900
Trying X.X.X.X...
Connected to X.X.X.X.
Escape character is '^]'.
^]
telnet> quit
Connection closed.
[email protected]:~#
[email protected]~# telnet X.X.X.X 12201
Trying X.X.X.X...
Connected to X.X.X.X.
Escape character is '^]'.
^]
telnet> quit
Connection closed.
[email protected]:~#
============
Input SSSSSS-logs (GELF TCP) Graylog server :
==================
recv_buffer_size: 1048576
port: 12201
tls_key_file: SSSSSSSSSS
tls_key_password: *******
tls_client_auth_cert_file:
max_message_size: 2097152
tls_client_auth: disabled
override_source:
bind_address: 0.0.0.0
tls_cert_file:
================
Log at collector:
============
2015-12-03T13:37:57.591+0530 INFO [main] cli.commands.Run - Starting
Collector v0.4.1 (commit 36a0856)
2015-12-03T13:37:57.593+0530 INFO [main] cli.commands.Run - Running on
Ubuntu 14.04.3 LTS (trusty) Linux 3.13.0-63-generic (amd64)
2015-12-03T13:37:58.297+0530 INFO [main] collector.utils.CollectorId -
Collector ID: 79ca45f7-f5a2-47aa-aca9-6fc955b495ea
2015-12-03T13:37:58.313+0530 INFO [main] outputs.gelf.GelfOutput -
Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@75b6bd33
2015-12-03T13:37:58.398+0530 INFO [main] outputs.gelf.GelfOutput -
Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@510afb13
2015-12-03T13:37:58.409+0530 INFO [main] collector.file.FileReaderService
- Configured files for input "Reverse-proxy-logs" do not exist yet. They
will be followed once they are created.
2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
RUNNING: BufferProcessor [RUNNING]
2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
RUNNING: FileObserver [RUNNING]
2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
RUNNING: MemoryReporterService [RUNNING]
2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
RUNNING: MetricService [RUNNING]
2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
RUNNING: HeartbeatService [RUNNING]
2015-12-03T13:37:58.413+0530 INFO [main] cli.commands.Run - Service
RUNNING: GelfOutput{port='12201', id='gelf-1',
client-send-buffer-size='-1', host='X.X.X.X', inputs='',
client-reconnect-delay='1000', client-connect-timeout='5000',
client-tcp-no-delay='true', client-queue-size='512'}
2015-12-03T13:37:58.413+0530 INFO [main] cli.commands.Run - Service
RUNNING: GelfOutput{port='12201', id='gelf-2',
client-send-buffer-size='-1', host='X.X.X.X', inputs='',
client-reconnect-delay='1000', client-connect-timeout='5000',
client-tcp-no-delay='true', client-queue-size='512'}
2015-12-03T13:37:58.415+0530 INFO [main] cli.commands.Run - Service
RUNNING: FileInput{id='SSSSSSS-logs',
path-set='GlobPathSet{rootPath=/var/log/SOME,
pattern=*.{access,error}.log}', reader-buffer-size='102400',
message-fields='MessageFields{}', charset='UTF-8',
outputs='gelf-2,gelf-1,console', content-splitter='NEWLINE',
reader-interval='100'}
2015-12-03T13:37:58.419+0530 INFO [main] cli.commands.Run - Service
RUNNING: StdoutOutput{id='console', inputs=''}
============
-
Parveen
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/8eb19f01-f263-4129-b70d-a75d749a440a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
