Hi Phil, could you try to start the Sidecar in foreground mode. Just open a shell and go to the installation directory. Start the Sidecar with graylog-collector-sidecar. Post the output you see here, maybe we can see some problems.
Cheers, Marius On 29 July 2016 at 13:16, Phil Sumner <[email protected]> wrote: > Hi, > > I'm having trouble getting sidecar/NXLog working with Windows. > > I've installed graylog-sidecar & nxlog on Windows Server 2008R2 and > installed/started it as a service. > > I've installed NXLog and removed the service. > > My collector_sidecar.yml looks like this (paths to nxlog all checked to be > correct): > server_url: http://10.x.x.x:12900 > update_interval: 10 > tls_skip_verify: false > node_id: shaadc02 > collector_id: file:C:\Program Files (x86)\graylog\collector-sidecar\ > collector-id > log_path: C:\Program Files (x86)\graylog\collector-sidecar\logs\ > log_rotation_time: 86400 > log_max_age: 604800 > tags: > - windows > backends: > - name: nxlog > enabled: false > binary_path: C:\Program Files (x86)\nxlog\nxlog.exe > configuration_path: C:\Program Files (x86)\graylog\collector-sidecar > \generated\nxlog.conf > > I've set up a collector configuration: > > > <https://lh3.googleusercontent.com/-byD9-nf2Npo/V5s4gtym70I/AAAAAAABbIE/-FAIf2eMvP8Zz4ayXLSDg4sZieia5vk1ACLcB/s1600/Capture.PNG> > > > > I can see the new collector checking in: > > > <https://lh3.googleusercontent.com/-zBvvbHYm2m8/V5s5Dj8oJEI/AAAAAAABbII/_R_NHjzGJOkVDkJsi0P_18sA-378FbX-QCLcB/s1600/Capture.PNG> > > > The snippet in the tag config is the default: > {{if .Linux}} > User nxlog > Group nxlog > Moduledir /usr/lib/nxlog/modules > CacheDir /var/spool/collector-sidecar/nxlog > PidFile /var/run/graylog/collector-sidecar/nxlog.pid > define LOGFILE /var/log/graylog/collector-sidecar/nxlog.log > LogFile %LOGFILE% > LogLevel INFO > > <Extension logrotate> > Module xm_fileop > <Schedule> > When @daily > Exec file_cycle('%LOGFILE%', 7); > </Schedule> > </Extension> > {{end}} > > {{if .Windows}} > Moduledir %ROOT%\modules > CacheDir %ROOT%\data > Pidfile %ROOT%\data\nxlog.pid > SpoolDir %ROOT%\data > LogFile %ROOT%\data\nxlog.log > LogLevel INFO > > <Extension logrotate> > Module xm_fileop > <Schedule> > When @daily > Exec file_cycle('%ROOT%\data\nxlog.log', 7); > </Schedule> > </Extension> > {{end}} > > > nxlog.conf is this: > define ROOT C:\Program Files (x86)\nxlog > > Moduledir %ROOT%\modules > CacheDir %ROOT%\data > Pidfile %ROOT%\data\nxlog.pid > SpoolDir %ROOT%\data > LogFile %ROOT%\data\nxlog.log > > <Extension gelf> > Module xm_gelf > </Extension> > > > But I never see anything in the ...\generated\ folder, and nxlog never > starts. > > > What am I missing? > > Thanks, > Phil > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/2f94f695-e838-4e61-b4fa-8ea038df85f4%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/2f94f695-e838-4e61-b4fa-8ea038df85f4%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog Company Poolstraße 21 20335 Hamburg Germany https://www.graylog.com <https://www.torch.sh/> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMqbBbJ-VCDzyAtJ6KVfTsS9GG2YTL4Zu1UC3xJ2DUwRGOEo1Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
