Hallo,
so i have install the OVA from graylog and config it like the tutorials on
the Page.
CommandDescription
sudo graylog-ctl set-admin-password <password> Set a new admin password
sudo graylog-ctl set-admin-username <username> Set a different username for
the admin user
sudo graylog-ctl set-email-config <smtp server> [–port=<smtp port>
–user=<username> –password=<password> –no-tls –no-ssl] Configure SMTP
settings to send alert mails
sudo graylog-ctl set-timezone <zone acronym> Set Graylog’s timezone. Make
sure system time is also set correctly with sudo dpkg-reconfigure tzdata
sudo graylog-ctl set-retention –size=<Gb> OR –time=<hours>
–indices=<number> [–journal=<Gb>] Configure message retention
sudo graylog-ctl enforce-ssl
sudo graylog-ctl reconfigure
sudo graylog-ctl restart graylog-server
After this i install the collector on a CentOS 6.7
This is the Config File
ssage-buffer-size = 128
inputs {
local-syslog {
type = "file"
path = "/var/log/syslog"
}
apache-access {
type = "file"
path = "/var/log/apache2/access.log"
outputs = "gelf-tcp,console"
}
test-log {
type = "file"
path = "logs/file.log"
}
}
outputs {
gelf-tcp {
type = "gelf"
host = "127.0.0.1" ----------> IP change to the graylog server
port = 12201
client-queue-size = 512
client-connect-timeout = 5000
client-reconnect-delay = 1000
client-tcp-no-delay = true
client-send-buffer-size = 32768
inputs = "test-log"
}
console {
type = "stdout"
}
}
after this i started it
* bin/graylog-collector run -f collector.conf*
It dose´n Connect to the server
This ist the Fail Messages ( it is a litle bit in German)
2016-03-16T16:02:48.606+0100 WARN [HeartbeatService RUNNING]
collector.heartbeat.HeartbeatService - Unable to send heartbeat to Graylog
server: ConnectException: Verbindungsaufbau abgelehnt
Afte this i Have deaktivate the firewale on the Graylog server
*sudo ufw disable*
an Config in the Webinterface the input
override_source:
recv_buffer_sitz: 262144
bind_address: 0.0.0.0
port;12201
But this dose´n change the Problem. The Client does´n connect
What could i do ???
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/29a3eb5c-8069-4389-83fa-a75ceaaccc0e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
