Thanks for reverting. Please find my update in-line
On Thu, Dec 3, 2015 at 4:53 PM, Jochen Schalanda <[email protected]> wrote:
> Hi Parveen,
>
> do you see any messages on the output of the Graylog Collector (via the
> configured "console" output)?
>
>> Not sure how to do that .... Please help
Do you see any traffic on the GELF TCP input on your Graylog server (check
> in the web interface on the System -> Inputs page).
>
>> No traffic via collector but message are coming via nc on the input
port.
Are there any messages added to the monitored files
> ("/var/log/SOME/*.{access,error}.log") during the runtime of the Graylog
> Collector? It will only send new lines to Graylog and won't read in
> existing lines.
> >> Yes, the monitored files ("/var/log/SOME/*.{access,error}.log") are
> getting updated multiple times every sec.
>
>
>
> Cheers,
> Jochen
>
> On Thursday, 3 December 2015 12:08:23 UTC+1, [email protected] wrote:
>>
>> Also noticed the conections is established :
>>
>> ON graylog server:
>>
>> [email protected]# netstat -plant | grep Y.Y.Y.Y
>> tcp6 0 0 X.X.X.X:12201 Y.Y.Y.Y:50450 ESTABLISHED
>> 5514/java
>> tcp6 0 0 X.X.X.X:12900 Y.Y.Y.Y:44885 ESTABLISHED
>> 5514/java
>> tcp6 0 0 X.X.X.X:12201 Y.Y.Y.Y:50449 ESTABLISHED
>> 5514/java
>> root@
>>
>> On collector:
>>
>> [email protected]:~# netstat -plant| grep X.X.X.X
>> tcp6 0 0 Y.Y.Y.Y:50450 X.X.X.X:12201 ESTABLISHED
>> 23381/java
>> tcp6 0 0 Y.Y.Y.Y:50449 X.X.X.X:12201 ESTABLISHED
>> 23381/java
>> tcp6 0 0 Y.Y.Y.Y:44885 X.X.X.X:12900 ESTABLISHED
>> 23381/java
>> [email protected]:~#
>>
>>
>> Other configs :
>> https://gist.github.com/Parveen-zopper/4175cb94f97656b4cd15
>>
>>
>>
>> -
>> Parveen
>> On Thursday, December 3, 2015 at 2:35:18 PM UTC+5:30, [email protected]
>> wrote:
>>>
>>> Hi all,
>>>
>>>
>>> Graylog data collector is not sending messages to the server.
>>>
>>>
>>> graylog-server: X.X.X.X.X
>>> graylog-data-collector: Y.Y.Y.Y
>>>
>>>
>>> was able to push message to the server and is listing on graylog server
>>> using:
>>> echo -e '{"version":
>>> "1.1","host":"test111.fdsfdsfdsfsdf.org","short_message":"Short
>>> message","full_message":"Backtrace here\n\nmore
>>> stuff","level":1,"_user_id":900111,"_some_info":"foo","_some_env_var":"bar"}\0'
>>> | nc -w 1 X.X.X.X 12201
>>>
>>>
>>>
>>> Many TIA in advance.
>>>
>>>
>>>
>>> Collector.conf
>>>
>>> =============
>>> server-url = "http://X.X.X.X:12900/";
>>>
>>>
>>> collector-id = "file:/etc/graylog/collector/collector-id"
>>>
>>>
>>> inputs {
>>> Reverse-proxy-logs {
>>> type = "file"
>>> path-glob-root = "/var/log/SOME"
>>> path-glob-pattern = "*.{access,error}.log"
>>> outputs = "gelf-1,gelf-2,console"
>>> }
>>> }
>>>
>>>
>>> outputs {
>>> gelf-1 {
>>> type = "gelf"
>>> host = "X.X.X.X"
>>> port = 12201
>>> }
>>> gelf-2 {
>>> type = "gelf"
>>> host = "X.X.X.X"
>>> port = 12201
>>> }
>>> console {
>>> type = "stdout"
>>> input = "Reverse-proxy-logs"
>>> }
>>> }
>>>
>>> =============
>>>
>>>
>>> Telnet result gray log cllector:
>>>
>>> ============
>>> [email protected]:~# telnet X.X.X.X 12900
>>> Trying X.X.X.X...
>>> Connected to X.X.X.X.
>>> Escape character is '^]'.
>>> ^]
>>> telnet> quit
>>> Connection closed.
>>> [email protected]:~#
>>> [email protected]~# telnet X.X.X.X 12201
>>> Trying X.X.X.X...
>>> Connected to X.X.X.X.
>>> Escape character is '^]'.
>>> ^]
>>> telnet> quit
>>> Connection closed.
>>> [email protected]:~#
>>> ============
>>>
>>> Input SSSSSS-logs (GELF TCP) Graylog server :
>>>
>>> ==================
>>> recv_buffer_size: 1048576
>>> port: 12201
>>> tls_key_file: SSSSSSSSSS
>>> tls_key_password: *******
>>> tls_client_auth_cert_file:
>>> max_message_size: 2097152
>>> tls_client_auth: disabled
>>> override_source:
>>> bind_address: 0.0.0.0
>>> tls_cert_file:
>>> ================
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> Log at collector:
>>> ============
>>> 2015-12-03T13:37:57.591+0530 INFO [main] cli.commands.Run - Starting
>>> Collector v0.4.1 (commit 36a0856)
>>> 2015-12-03T13:37:57.593+0530 INFO [main] cli.commands.Run - Running on
>>> Ubuntu 14.04.3 LTS (trusty) Linux 3.13.0-63-generic (amd64)
>>> 2015-12-03T13:37:58.297+0530 INFO [main] collector.utils.CollectorId -
>>> Collector ID: 79ca45f7-f5a2-47aa-aca9-6fc955b495ea
>>> 2015-12-03T13:37:58.313+0530 INFO [main] outputs.gelf.GelfOutput -
>>> Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@75b6bd33
>>> 2015-12-03T13:37:58.398+0530 INFO [main] outputs.gelf.GelfOutput -
>>> Starting GELF transport: org.graylog2.gelfclient.GelfConfiguration@510afb13
>>> 2015-12-03T13:37:58.409+0530 INFO [main]
>>> collector.file.FileReaderService - Configured files for input
>>> "Reverse-proxy-logs" do not exist yet. They will be followed once they are
>>> created.
>>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: BufferProcessor [RUNNING]
>>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: FileObserver [RUNNING]
>>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: MemoryReporterService [RUNNING]
>>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: MetricService [RUNNING]
>>> 2015-12-03T13:37:58.411+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: HeartbeatService [RUNNING]
>>> 2015-12-03T13:37:58.413+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: GelfOutput{port='12201', id='gelf-1',
>>> client-send-buffer-size='-1', host='X.X.X.X', inputs='',
>>> client-reconnect-delay='1000', client-connect-timeout='5000',
>>> client-tcp-no-delay='true', client-queue-size='512'}
>>> 2015-12-03T13:37:58.413+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: GelfOutput{port='12201', id='gelf-2',
>>> client-send-buffer-size='-1', host='X.X.X.X', inputs='',
>>> client-reconnect-delay='1000', client-connect-timeout='5000',
>>> client-tcp-no-delay='true', client-queue-size='512'}
>>> 2015-12-03T13:37:58.415+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: FileInput{id='SSSSSSS-logs',
>>> path-set='GlobPathSet{rootPath=/var/log/SOME,
>>> pattern=*.{access,error}.log}', reader-buffer-size='102400',
>>> message-fields='MessageFields{}', charset='UTF-8',
>>> outputs='gelf-2,gelf-1,console', content-splitter='NEWLINE',
>>> reader-interval='100'}
>>> 2015-12-03T13:37:58.419+0530 INFO [main] cli.commands.Run - Service
>>> RUNNING: StdoutOutput{id='console', inputs=''}
>>>
>>>
>>> ============
>>>
>>>
>>>
>>> -
>>> Parveen
>>>
>> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Graylog Users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/graylog2/xhbRxcVsSBY/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/59e5b457-a504-4ea8-8f61-db71a1e53945%40googlegroups.com
> <https://groups.google.com/d/msgid/graylog2/59e5b457-a504-4ea8-8f61-db71a1e53945%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/CALfVFp%2Ba_g09wAKObQAtOEMc-vkr_svOOifHS61eL3O61RXhTQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
