Hey, I have changed the IP on Input at system>collectors>manage connections and I have set the IP to 192.168.1.54 (the ip of the server where sidecar is installed) I have 2 servers one that is running graylog2 server and web and the other is running the sidecar. This is what I get in /var/log/graylog/collector-sidecar/nxlog.log
2016-08-30 03:43:52 ERROR om_udp apr_socket_send failed;Connection refused 2016-08-30 03:43:53 INFO reconnecting in 1 seconds 2016-08-30 03:43:53 ERROR om_udp apr_socket_send failed;Connection refused 2016-08-30 03:52:51 INFO configuration OK 2016-08-30 03:52:54 INFO nxlog-ce-2.9.1716 started Thanks. On Tuesday, August 30, 2016 at 12:48:08 PM UTC+2, Marius Sturm wrote: > > Hi, > your IP 0.0.0.0 looks wrong, when the Sidecar is running on the same > machine use 127.0.0.1 otherwise the external IP of the Graylog server like > 192.168.X.X > You can also check the log files in /var/log/graylog/collector-sidecar/* > for more help on this. > > Cheers, > Marius > > > On 30 August 2016 at 12:28, Ciprian <[email protected] <javascript:>> > wrote: > >> First of all thank you for the quick reply! >> I have set an output with the type gelf udp output, the server ip as >> 0.0.0.0 and port 514. >> I have also set an input with the type file input and the path being >> /var/log/auth.log and the poll interval 1. >> When I go to the collector and click show messages I still don't have >> anything, and yes I have updated the tag. Everything I'm using this one is >> ubuntu 16.04 by the way. >> Been struggling with this since Thursday and I didn't manage to get any >> workaround so any help would be much appreciated. >> Thank you. >> >> On Tuesday, August 30, 2016 at 11:51:20 AM UTC+2, Marius Sturm wrote: >>> >>> Hi Ciprian, >>> you dont need to install anything on the server side, the Graylog >>> collector plugin, that is needed for the Sidecar to work, is already >>> included in the standard installation. >>> When the Sidecar is registered under System->Collectors the only thing >>> you have to do is to click on 'Manage configurations' and create a new one >>> with a Gelf output pointing to your server address and a file or Windows >>> event input with the settings you need. Apply the same tag you used for the >>> Sidecar to associate this configuration with the running Sidecar. >>> >>> Cheers, >>> Marius >>> >>> >>> On 30 August 2016 at 11:43, Ciprian <[email protected]> wrote: >>> >>>> Hey, did you have to install collector on both the graylog server >>>> machine and the host you are trying to gather logs from? >>>> My collector is popping on the system>collectors icon but I cannot get >>>> any messages from it, I do not know why, and I am quite stuck, can you >>>> help >>>> me please? >>>> Thanks >>>> >>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "Graylog Users" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/d/msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com >>>> >>>> <https://groups.google.com/d/msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> For more options, visit https://groups.google.com/d/optout. >>>> >>> >>> >>> >>> -- >>> Developer >>> >>> Tel.: +49 (0)40 609 452 077 >>> Fax.: +49 (0)40 609 452 078 >>> >>> TORCH GmbH - A Graylog Company >>> Poolstraße 21 >>> 20335 Hamburg >>> Germany >>> >>> https://www.graylog.com <https://www.torch.sh/> >>> >>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 >>> Geschäftsführer: Lennart Koopmann (CEO) >>> >> -- >> You received this message because you are subscribed to the Google Groups >> "Graylog Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com >> >> <https://groups.google.com/d/msgid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > Developer > > Tel.: +49 (0)40 609 452 077 > Fax.: +49 (0)40 609 452 078 > > TORCH GmbH - A Graylog Company > Poolstraße 21 > 20335 Hamburg > Germany > > https://www.graylog.com <https://www.torch.sh/> > > Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 > Geschäftsführer: Lennart Koopmann (CEO) > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/c0d7eb04-4421-4b46-8410-b149b6237dce%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
