Hi Parveen,
do you see any messages on the output of the Graylog Collector (via the
configured "console" output)?
Do you see any traffic on the GELF TCP input on your Graylog server (check
in the web interface on the System -> Inputs page).
Are there any messages added to the monitored files
("/var/log/SOME/*.{access,error}.log") during the runtime of the Graylog
Collector? It will only send new lines to Graylog and won't read in
existing lines.
Cheers,
Jochen
On Thursday, 3 December 2015 12:08:23 UTC+1, [email protected] wrote:
>
> Also noticed the conections is established :
>
> ON graylog server:
>
> [email protected]# netstat -plant | grep Y.Y.Y.Y
> tcp6 0 0 X.X.X.X:12201 Y.Y.Y.Y:50450 ESTABLISHED
> 5514/java
> tcp6 0 0 X.X.X.X:12900 Y.Y.Y.Y:44885 ESTABLISHED
> 5514/java
> tcp6 0 0 X.X.X.X:12201 Y.Y.Y.Y:50449 ESTABLISHED
> 5514/java
> root@
>
> On collector:
>
> [email protected]:~# netstat -plant| grep X.X.X.X
> tcp6 0 0 Y.Y.Y.Y:50450 X.X.X.X:12201 ESTABLISHED
> 23381/java
> tcp6 0 0 Y.Y.Y.Y:50449 X.X.X.X:12201 ESTABLISHED
> 23381/java
> tcp6 0 0 Y.Y.Y.Y:44885 X.X.X.X:12900 ESTABLISHED
> 23381/java
> [email protected]:~#
>
>
> Other configs :
> https://gist.github.com/Parveen-zopper/4175cb94f97656b4cd15
>
>
>
> -
> Parveen
> On Thursday, December 3, 2015 at 2:35:18 PM UTC+5:30, [email protected]
> wrote:
>>
>> Hi all,
>>
>>
>> Graylog data collector is not sending messages to the server.
>>
>>
>> graylog-server: X.X.X.X.X
>> graylog-data-collector: Y.Y.Y.Y
>>
>>
>> was able to push message to the server and is listing on graylog server
>> using:
>> echo -e '{"version":
>> "1.1","host":"test111.fdsfdsfdsfsdf.org","short_message":"Short
>> message","full_message":"Backtrace here\n\nmore
>> stuff","level":1,"_user_id":900111,"_some_info":"foo","_some_env_var":"bar"}\0'
>>
>> | nc -w 1 X.X.X.X 12201
>>
>>
>>
>> Many TIA in advance.
>>
>>
>>
>> Collector.conf
>>
>> =============
>> server-url = "http://X.X.X.X:12900/";
>>
>>
>> collector-id = "file:/etc/graylog/collector/collector-id"
>>
>>
>> inputs {
>> Reverse-proxy-logs {
>> type = "file"
>> path-glob-root = "/var/log/SOME"
>> path-glob-pattern = "*.{access,error}.log"
>> outputs = "gelf-1,gelf-2,console"
>> }
>> }
>>
>>
>> outputs {
>> gelf-1 {
>> type = "gelf"
>> host = "X.X.X.X"
>> port = 12201
>> }
>> gelf-2 {
>> type = "gelf"
>> host = "X.X.X.X"
>> port = 12201
>> }
>> console {
>> type = "stdout"
>> input = "Reverse-proxy-logs"
>> }
>> }
>>
>> =============
>>
>>
>> Telnet result gray log cllector:
>>
>> ============
>> [email protected]:~# telnet X.X.X.X 12900
>> Trying X.X.X.X...
>> Connected to X.X.X.X.
>> Escape character is '^]'.
>> ^]
>> telnet> quit
>> Connection closed.
>> [email protected]:~#
>> [email protected]~# telnet X.X.X.X 12201
>> Trying X.X.X.X...
>> Connected to X.X.X.X.
>> Escape character is '^]'.
>> ^]
>> telnet> quit
>> Connection closed.
>> [email protected]:~#
>> ============
>>
>> Input SSSSSS-logs (GELF TCP) Graylog server :
>>
>> ==================
>> recv_buffer_size: 1048576
>> port: 12201
>> tls_key_file: SSSSSSSSSS
>> tls_key_password: *******
>> tls_client_auth_cert_file:
>> max_message_size: 2097152
>> tls_client_auth: disabled
>> override_source:
>> bind_address: 0.0.0.0
>> tls_cert_file:
>> ================
>>
>>
>>
>>
>>
>>
>>
>>
>> Log at collector:
>> ============
>> 2015-12-03T13:37:57.591+0530 INFO [main] cli.commands.Run - Starting
>> Collector v0.4.1 (commit 36a0856)
>> 2015-12-03T13:37:57.593+0530 INFO [main] cli.commands.Run - Running on
>> Ubuntu 14.04.3 LTS (trusty) Linux 3.13.0-63-generic (amd64)
>> 2015-12-03T13:37:58.297+0530 INFO [main] collector.utils.CollectorId -
>> Collector ID: 79ca45f7-f5a2-47aa-aca9-6fc955b495ea
>> 2015-12-03T13:37:58.313+0530 INFO [main] outputs.gelf.GelfOutput -
>> Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@75b6bd33
>> 2015-12-03T13:37:58.398+0530 INFO [main] outputs.gelf.GelfOutput -
>> Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@510afb13
>> 2015-12-03T13:37:58.409+0530 INFO [main]
>> collector.file.FileReaderService - Configured files for input
>> "Reverse-proxy-logs" do not exist yet. They will be followed once they are
>> created.
>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: BufferProcessor [RUNNING]
>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: FileObserver [RUNNING]
>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: MemoryReporterService [RUNNING]
>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: MetricService [RUNNING]
>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: HeartbeatService [RUNNING]
>> 2015-12-03T13:37:58.413+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: GelfOutput{port='12201', id='gelf-1',
>> client-send-buffer-size='-1', host='X.X.X.X', inputs='',
>> client-reconnect-delay='1000', client-connect-timeout='5000',
>> client-tcp-no-delay='true', client-queue-size='512'}
>> 2015-12-03T13:37:58.413+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: GelfOutput{port='12201', id='gelf-2',
>> client-send-buffer-size='-1', host='X.X.X.X', inputs='',
>> client-reconnect-delay='1000', client-connect-timeout='5000',
>> client-tcp-no-delay='true', client-queue-size='512'}
>> 2015-12-03T13:37:58.415+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: FileInput{id='SSSSSSS-logs',
>> path-set='GlobPathSet{rootPath=/var/log/SOME,
>> pattern=*.{access,error}.log}', reader-buffer-size='102400',
>> message-fields='MessageFields{}', charset='UTF-8',
>> outputs='gelf-2,gelf-1,console', content-splitter='NEWLINE',
>> reader-interval='100'}
>> 2015-12-03T13:37:58.419+0530 INFO [main] cli.commands.Run - Service
>> RUNNING: StdoutOutput{id='console', inputs=''}
>>
>>
>> ============
>>
>>
>>
>> -
>> Parveen
>>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/59e5b457-a504-4ea8-8f61-db71a1e53945%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
