When you use "sudo graylog-ctl reconfigure" on the OVA appliance all configurations will be generated. The Elasticsearch cluster name should also be set correctly afterwards. It needs to be the same for Graylog server and the Elasticsearch service.
Cheers, Marius On 16 March 2016 at 11:23, 'Hendrik van Overstraeten' via Graylog Users < [email protected]> wrote: > Okay I have to fix it. I specify only in the elasticsearch.yml >> cluster.name. >> Now I have but I get no data purely the problem. >> I use a Windows system (WinServer 2012), where I installed and started >> Nxlog with the following configuration. >> > > <Extension gelf> > Module xm_gelf > </Extension> > > <Extension csv> > Module xm_csv > Fields $name, $number, $location > FieldTypes string, integer, string > Delimiter , > </Extension> > > <Input in> > Module im_file > File "/var/log/app/csv.log" > Exec csv->parse_csv(); > </Input> > > <Output out> > Module om_udp > Host 192.168.1.1 > Port 12201 > OutputType GELF > </Output> > > <Route r> > Path in => out > </Route> > > > On the Graylog server I installed and activated under Systems / Input GELF > UDP and TCP > > What else should I do so that the data arrive > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/82f4b510-d70e-4462-91b8-efb34f745d0e%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/82f4b510-d70e-4462-91b8-efb34f745d0e%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog Company Steckelhörn 11 20457 Hamburg Germany https://www.graylog.com <https://www.torch.sh/> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMqbBbKeBwxNY7dWroiz10ChEJUpDBASFkC-fBWj-6aVQUW7GA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
