Hi, I'm having trouble getting sidecar/NXLog working with Windows.
I've installed graylog-sidecar & nxlog on Windows Server 2008R2 and installed/started it as a service. I've installed NXLog and removed the service. My collector_sidecar.yml looks like this (paths to nxlog all checked to be correct): server_url: http://10.x.x.x:12900 update_interval: 10 tls_skip_verify: false node_id: shaadc02 collector_id: file:C:\Program Files (x86)\graylog\collector-sidecar\ collector-id log_path: C:\Program Files (x86)\graylog\collector-sidecar\logs\ log_rotation_time: 86400 log_max_age: 604800 tags: - windows backends: - name: nxlog enabled: false binary_path: C:\Program Files (x86)\nxlog\nxlog.exe configuration_path: C:\Program Files (x86)\graylog\collector-sidecar\ generated\nxlog.conf I've set up a collector configuration: <https://lh3.googleusercontent.com/-byD9-nf2Npo/V5s4gtym70I/AAAAAAABbIE/-FAIf2eMvP8Zz4ayXLSDg4sZieia5vk1ACLcB/s1600/Capture.PNG> I can see the new collector checking in: <https://lh3.googleusercontent.com/-zBvvbHYm2m8/V5s5Dj8oJEI/AAAAAAABbII/_R_NHjzGJOkVDkJsi0P_18sA-378FbX-QCLcB/s1600/Capture.PNG> The snippet in the tag config is the default: {{if .Linux}} User nxlog Group nxlog Moduledir /usr/lib/nxlog/modules CacheDir /var/spool/collector-sidecar/nxlog PidFile /var/run/graylog/collector-sidecar/nxlog.pid define LOGFILE /var/log/graylog/collector-sidecar/nxlog.log LogFile %LOGFILE% LogLevel INFO <Extension logrotate> Module xm_fileop <Schedule> When @daily Exec file_cycle('%LOGFILE%', 7); </Schedule> </Extension> {{end}} {{if .Windows}} Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log LogLevel INFO <Extension logrotate> Module xm_fileop <Schedule> When @daily Exec file_cycle('%ROOT%\data\nxlog.log', 7); </Schedule> </Extension> {{end}} nxlog.conf is this: define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log <Extension gelf> Module xm_gelf </Extension> But I never see anything in the ...\generated\ folder, and nxlog never starts. What am I missing? Thanks, Phil -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2f94f695-e838-4e61-b4fa-8ea038df85f4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
