Additionally port 514 indicates that you are sending gelf messages to a syslog receiver. Both protocols are not compatible, you need a gelf sender (nxlog) and a gelf receiver (graylog server with started gelf input).
\Marius On 30 August 2016 at 12:48, Marius Sturm <[email protected]> wrote: > Hi, > your IP 0.0.0.0 looks wrong, when the Sidecar is running on the same > machine use 127.0.0.1 otherwise the external IP of the Graylog server like > 192.168.X.X > You can also check the log files in /var/log/graylog/collector-sidecar/* > for more help on this. > > Cheers, > Marius > > > On 30 August 2016 at 12:28, Ciprian <[email protected]> wrote: > >> First of all thank you for the quick reply! >> I have set an output with the type gelf udp output, the server ip as >> 0.0.0.0 and port 514. >> I have also set an input with the type file input and the path being >> /var/log/auth.log and the poll interval 1. >> When I go to the collector and click show messages I still don't have >> anything, and yes I have updated the tag. Everything I'm using this one is >> ubuntu 16.04 by the way. >> Been struggling with this since Thursday and I didn't manage to get any >> workaround so any help would be much appreciated. >> Thank you. >> >> On Tuesday, August 30, 2016 at 11:51:20 AM UTC+2, Marius Sturm wrote: >>> >>> Hi Ciprian, >>> you dont need to install anything on the server side, the Graylog >>> collector plugin, that is needed for the Sidecar to work, is already >>> included in the standard installation. >>> When the Sidecar is registered under System->Collectors the only thing >>> you have to do is to click on 'Manage configurations' and create a new one >>> with a Gelf output pointing to your server address and a file or Windows >>> event input with the settings you need. Apply the same tag you used for the >>> Sidecar to associate this configuration with the running Sidecar. >>> >>> Cheers, >>> Marius >>> >>> >>> On 30 August 2016 at 11:43, Ciprian <[email protected]> wrote: >>> >>>> Hey, did you have to install collector on both the graylog server >>>> machine and the host you are trying to gather logs from? >>>> My collector is popping on the system>collectors icon but I cannot get >>>> any messages from it, I do not know why, and I am quite stuck, can you help >>>> me please? >>>> Thanks >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Graylog Users" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit https://groups.google.com/d/ms >>>> gid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com >>>> <https://groups.google.com/d/msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> >>> >>> >>> -- >>> Developer >>> >>> Tel.: +49 (0)40 609 452 077 >>> Fax.: +49 (0)40 609 452 078 >>> >>> TORCH GmbH - A Graylog Company >>> Poolstraße 21 >>> 20335 Hamburg >>> Germany >>> >>> https://www.graylog.com <https://www.torch.sh/> >>> >>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 >>> Geschäftsführer: Lennart Koopmann (CEO) >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "Graylog Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit https://groups.google.com/d/ms >> gid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com >> <https://groups.google.com/d/msgid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > Developer > > Tel.: +49 (0)40 609 452 077 > Fax.: +49 (0)40 609 452 078 > > TORCH GmbH - A Graylog Company > Poolstraße 21 > 20335 Hamburg > Germany > > https://www.graylog.com <https://www.torch.sh/> > > Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 > Geschäftsführer: Lennart Koopmann (CEO) > -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog Company Poolstraße 21 20335 Hamburg Germany https://www.graylog.com <https://www.torch.sh/> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMqbBbJGajVV3_CBiMbZDDB6N7fPHMp6iiqzgUOS3TvAroG_Hw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
