Hi Jochen, Now collector is showing running status only but I am not getting any messages.
Below the nxlog.conf /etc/graylog/collector-sidecar/generated/nxlog.conf define ROOT /usr/bin <Extension gelf> Module xm_gelf </Extension> User nxlog Group nxlog Moduledir /usr/lib/nxlog/modules CacheDir /var/spool/collector-sidecar/nxlog PidFile /var/run/graylog/collector-sidecar/nxlog.pid define LOGFILE /var/log/graylog/collector-sidecar/nxlog.log LogFile %LOGFILE% LogLevel INFO <Extension logrotate> Module xm_fileop <Schedule> When @daily Exec file_cycle('%LOGFILE%', 7); </Schedule> </Extension> <Input 57dbb2d3bfcab303ba29c467> Module im_file File 'var/log/syslog' PollInterval 1 SavePos True ReadFromLast True Recursive True RenameCheck False Exec $FileName = file_name(); # Send file name with each message </Input> <Input 57dbb305bfcab303ba29c49d> Module im_file File 'var/log/apache2/error.log' PollInterval 1 SavePos True ReadFromLast True Recursive True RenameCheck False Exec $FileName = file_name(); # Send file name with each message </Input> <Output 57dbb277bfcab303ba29c405> Module om_tcp Host 10.0.3.211 Port 5044 OutputType GELF_TCP Exec $short_message = $raw_event; # Avoids truncation of the short_message field. Exec $gl2_source_collector = '52703181-5745-47f3-9146-584ecb898383'; Exec $Hostname = hostname_fqdn(); </Output> <Route route-1> Path 57dbb2d3bfcab303ba29c467 => 57dbb277bfcab303ba29c405 </Route> <Route route-2> Path 57dbb305bfcab303ba29c49d => 57dbb277bfcab303ba29c405 </Route> I have used multiple ports like 514 513,5044 and 12201 but getting error like tailf /var/log/graylog/collector-sidecar/nxlog.log 2016-09-16 08:58:42 ERROR couldn't connect to tcp socket on 10.0.3.211:514;Connection refused 2016-09-16 08:58:50 INFO connecting to 10.0.3.211:514 2016-09-16 08:58:50 INFO reconnecting in 16 seconds tailf /var/log/graylog/collector-sidecar/nxlog.log 2016-09-16 09:01:47 INFO nxlog-ce-2.9.1716 started 2016-09-16 09:01:47 INFO connecting to 10.0.3.211:513 tailf /var/log/graylog/collector-sidecar/nxlog.log 2016-09-16 09:07:28 ERROR couldn't connect to tcp socket on 10.0.3.211:5044;Connection refused 2016-09-16 09:08:32 INFO connecting to 10.0.3.211:5044 2016-09-16 09:08:32 INFO reconnecting in 128 seconds tailf /var/log/graylog/collector-sidecar/nxlog.log 2016-09-16 09:18:51 INFO nxlog-ce-2.9.1716 started 2016-09-16 09:18:51 INFO connecting to 10.0.3.211:12201 2016-09-16 09:18:51 INFO reconnecting in 1 seconds Network connection is perfect between to systems. Thanks for you reply. On Friday, 16 September 2016 14:08:21 UTC+5:30, Jochen Schalanda wrote: > > Hi Surajit, > > please share the contents of > /etc/graylog/collector-sidecar/generated/nxlog.conf and the configuration > for the collector you've created in Graylog. > > Cheers, > Jochen > > On Friday, 16 September 2016 07:54:21 UTC+2, Surajit Roy wrote: >> >> /etc/graylog/collector-sidecar/collector_sidecar.yml configuretiaon is >> below. >> >> server_url: http://10.0.3.211:9000/api/ >> update_interval: 30 >> tls_skip_verify: true >> send_status: true >> list_log_files: /var/log >> node_id: graylog-collector-sidecar >> collector_id: file:/etc/graylog/collector-sidecar/collector-id >> log_path: /var/log/graylog/collector-sidecar >> log_rotation_time: 86400 >> log_max_age: 604800 >> tags: >> - linux >> - apache >> backends: >> - name: nxlog >> enabled: true >> binary_path: /usr/bin/nxlog >> configuration_path: >> /etc/graylog/collector-sidecar/generated/nxlog.conf >> ~ >> >> >> >> Below the nxlog . >> >> tailf /var/log/graylog/collector-sidecar/nxlog.log >> 2016-09-16 05:26:16 INFO nxlog-ce-2.9.1716 started >> 2016-09-16 05:27:25 WARNING no routes defined! >> 2016-09-16 05:27:25 INFO configuration OK >> 2016-09-16 05:27:25 INFO reloading configuration and restarting modules >> 2016-09-16 05:27:25 WARNING no functional input modules! >> 2016-09-16 05:27:25 WARNING no routes defined! >> 2016-09-16 05:27:25 INFO configuration reloaded successfully. >> 2016-09-16 05:27:29 WARNING no functional input modules! >> 2016-09-16 05:27:29 WARNING no routes defined! >> 2016-09-16 05:27:29 INFO nxlog-ce-2.9.1716 started >> >> root@ip-10-0-3-67:/home/ubuntu# graylog-collector-sidecar -c >> /etc/graylog/collector-sidecar/collector_sidecar.yml >> INFO[0000] Using collector-id: 52703181-5745-47f3-9146-584ecb898383 >> INFO[0000] Fetching configurations tagged by: [linux apache] >> INFO[0000] Starting collector supervisor >> INFO[0000] [nxlog] Starting >> ERRO[0000] [nxlog] Collector exits immediately, this should not happen! >> Please check your collector configuration! >> ERRO[0000] [nxlog] Backend crashed, trying to restart 1/3 >> INFO[0005] [nxlog] Starting >> ERRO[0005] [nxlog] Collector exits immediately, this should not happen! >> Please check your collector configuration! >> ERRO[0005] [nxlog] Backend crashed, trying to restart 2/3 >> INFO[0010] [nxlog] Starting >> ERRO[0010] [nxlog] Collector exits immediately, this should not happen! >> Please check your collector configuration! >> ERRO[0010] [nxlog] Backend crashed, trying to restart 3/3 >> >> >> >> Please suggest me where I did wrong . >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/971bec81-29df-4955-ad0f-9b093283cb1c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.