Hi Jochen,
Now collector is showing running status only but I am not getting any
messages.
Below the nxlog.conf
/etc/graylog/collector-sidecar/generated/nxlog.conf
define ROOT /usr/bin
<Extension gelf>
Module xm_gelf
</Extension>
User nxlog
Group nxlog
Moduledir /usr/lib/nxlog/modules
CacheDir /var/spool/collector-sidecar/nxlog
PidFile /var/run/graylog/collector-sidecar/nxlog.pid
define LOGFILE /var/log/graylog/collector-sidecar/nxlog.log
LogFile %LOGFILE%
LogLevel INFO
<Extension logrotate>
Module xm_fileop
<Schedule>
When @daily
Exec file_cycle('%LOGFILE%', 7);
</Schedule>
</Extension>
<Input 57dbb2d3bfcab303ba29c467>
Module im_file
File 'var/log/syslog'
PollInterval 1
SavePos True
ReadFromLast True
Recursive True
RenameCheck False
Exec $FileName = file_name(); # Send file name with each message
</Input>
<Input 57dbb305bfcab303ba29c49d>
Module im_file
File 'var/log/apache2/error.log'
PollInterval 1
SavePos True
ReadFromLast True
Recursive True
RenameCheck False
Exec $FileName = file_name(); # Send file name with each message
</Input>
<Output 57dbb277bfcab303ba29c405>
Module om_tcp
Host 10.0.3.211
Port 5044
OutputType GELF_TCP
Exec $short_message = $raw_event; # Avoids truncation of the
short_message field.
Exec $gl2_source_collector = '52703181-5745-47f3-9146-584ecb898383';
Exec $Hostname = hostname_fqdn();
</Output>
<Route route-1>
Path 57dbb2d3bfcab303ba29c467 => 57dbb277bfcab303ba29c405
</Route>
<Route route-2>
Path 57dbb305bfcab303ba29c49d => 57dbb277bfcab303ba29c405
</Route>
I have used multiple ports like 514 513,5044 and 12201 but getting error
like
tailf /var/log/graylog/collector-sidecar/nxlog.log
2016-09-16 08:58:42 ERROR couldn't connect to tcp socket on
10.0.3.211:514;Connection
refused
2016-09-16 08:58:50 INFO connecting to 10.0.3.211:514
2016-09-16 08:58:50 INFO reconnecting in 16 seconds
tailf /var/log/graylog/collector-sidecar/nxlog.log
2016-09-16 09:01:47 INFO nxlog-ce-2.9.1716 started
2016-09-16 09:01:47 INFO connecting to 10.0.3.211:513
tailf /var/log/graylog/collector-sidecar/nxlog.log
2016-09-16 09:07:28 ERROR couldn't connect to tcp socket on
10.0.3.211:5044;Connection
refused
2016-09-16 09:08:32 INFO connecting to 10.0.3.211:5044
2016-09-16 09:08:32 INFO reconnecting in 128 seconds
tailf /var/log/graylog/collector-sidecar/nxlog.log
2016-09-16 09:18:51 INFO nxlog-ce-2.9.1716 started
2016-09-16 09:18:51 INFO connecting to 10.0.3.211:12201
2016-09-16 09:18:51 INFO reconnecting in 1 seconds
Network connection is perfect between to systems.
Thanks for you reply.
On Fri, Sep 16, 2016 at 2:08 PM, Jochen Schalanda <joc...@graylog.com>
wrote:
> Hi Surajit,
>
> please share the contents of /etc/graylog/collector-side
> car/generated/nxlog.conf and the configuration for the collector you've
> created in Graylog.
>
> Cheers,
> Jochen
>
>
> On Friday, 16 September 2016 07:54:21 UTC+2, Surajit Roy wrote:
>>
>> /etc/graylog/collector-sidecar/collector_sidecar.yml configuretiaon is
>> below.
>>
>> server_url: http://10.0.3.211:9000/api/
>> update_interval: 30
>> tls_skip_verify: true
>> send_status: true
>> list_log_files: /var/log
>> node_id: graylog-collector-sidecar
>> collector_id: file:/etc/graylog/collector-sidecar/collector-id
>> log_path: /var/log/graylog/collector-sidecar
>> log_rotation_time: 86400
>> log_max_age: 604800
>> tags:
>> - linux
>> - apache
>> backends:
>> - name: nxlog
>> enabled: true
>> binary_path: /usr/bin/nxlog
>> configuration_path: /etc/graylog/collector-sidecar
>> /generated/nxlog.conf
>> ~
>>
>>
>>
>> Below the nxlog .
>>
>> tailf /var/log/graylog/collector-sidecar/nxlog.log
>> 2016-09-16 05:26:16 INFO nxlog-ce-2.9.1716 started
>> 2016-09-16 05:27:25 WARNING no routes defined!
>> 2016-09-16 05:27:25 INFO configuration OK
>> 2016-09-16 05:27:25 INFO reloading configuration and restarting modules
>> 2016-09-16 05:27:25 WARNING no functional input modules!
>> 2016-09-16 05:27:25 WARNING no routes defined!
>> 2016-09-16 05:27:25 INFO configuration reloaded successfully.
>> 2016-09-16 05:27:29 WARNING no functional input modules!
>> 2016-09-16 05:27:29 WARNING no routes defined!
>> 2016-09-16 05:27:29 INFO nxlog-ce-2.9.1716 started
>>
>> root@ip-10-0-3-67:/home/ubuntu# graylog-collector-sidecar -c
>> /etc/graylog/collector-sidecar/collector_sidecar.yml
>> INFO[0000] Using collector-id: 52703181-5745-47f3-9146-584ecb898383
>> INFO[0000] Fetching configurations tagged by: [linux apache]
>> INFO[0000] Starting collector supervisor
>> INFO[0000] [nxlog] Starting
>> ERRO[0000] [nxlog] Collector exits immediately, this should not happen!
>> Please check your collector configuration!
>> ERRO[0000] [nxlog] Backend crashed, trying to restart 1/3
>> INFO[0005] [nxlog] Starting
>> ERRO[0005] [nxlog] Collector exits immediately, this should not happen!
>> Please check your collector configuration!
>> ERRO[0005] [nxlog] Backend crashed, trying to restart 2/3
>> INFO[0010] [nxlog] Starting
>> ERRO[0010] [nxlog] Collector exits immediately, this should not happen!
>> Please check your collector configuration!
>> ERRO[0010] [nxlog] Backend crashed, trying to restart 3/3
>>
>>
>>
>> Please suggest me where I did wrong .
>>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Graylog Users" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/graylog2/mHPqEhr1bhk/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/672749b0-5523-477d-bd52-87d4dfa91ffe%40googlegroups.com
> <https://groups.google.com/d/msgid/graylog2/672749b0-5523-477d-bd52-87d4dfa91ffe%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>
--
Thank & Best Regards
Surajit Roy
7483119839.
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/CAK%3DBhURttTzztLAkez%3Du%3DipNV9LRnFZye-8B90rfvck5%2BrPXzQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
