Hi Justin, did you create any configuration for that host under 'System->Collectors->Manage configurations'? Also make sure that the configuration actually is tagged by 'linux' and/or <serverName>
Cheers, Marius On 6 October 2016 at 19:11, Justin Bell <[email protected]> wrote: > I'm running into an issue with getting the collector-sidecar to work on my > server, and I'm hoping someone can point me in the right direction. > > The logs that I'm seeing are: > > Oct 6 11:04:35 <serverName> /usr/bin/graylog-collector-sidecar[450]: time > ="2016-10-06T10:45:09-06:00" level=info msg="Using collector-id: > 86d4a0a3-24c7-4c72-b62e-9f55bb309a8c" > Oct 6 11:04:35 <serverName> /usr/bin/graylog-collector-sidecar[450]: time > ="2016-10-06T10:45:09-06:00" level=info msg="Fetching configurations > tagged by: [linux <serverName>]" > Oct 6 11:04:35 <serverName> /usr/bin/graylog-collector-sidecar[450]: time > ="2016-10-06T10:45:09-06:00" level=info msg="Starting signal distributor" > Oct 6 11:04:35 <serverName> /usr/bin/graylog-collector-sidecar[450]: time > ="2016-10-06T10:45:09-06:00" level=info msg="[nxlog] Starting (exec > driver)" > Oct 6 11:04:35 <serverName> /usr/bin/graylog-collector-sidecar[450]: time > ="2016-10-06T10:45:09-06:00" level=error msg="[nxlog] Collector exits > immediately, this should not happen! Please check your collector > configuration!" > Oct 6 11:04:35 <serverName> /usr/bin/graylog-collector-sidecar[450]: time > ="2016-10-06T10:45:09-06:00" level=error msg="[nxlog] Backend crashed, > trying to restart 1/3" > > > And then inside of nxlog_stderr.log: > > Failed to open config file "/etc/graylog/collector- > sidecar/generated/nxlog.conf";No such file or directory > > > > the file /etc/graylog/collector-sidecar/generated/nxlog.conf actually > does exist. > > If I let it keep running I then get this: > > Oct 6 11:04:39 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:39-06:00" level=info msg="[nxlog] Starting (exec > driver)" > Oct 6 11:04:39 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:39-06:00" level=error msg="[nxlog] Collector exits > immediately, this should not happen! Please check your collector > configuration!" > Oct 6 11:04:39 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:39-06:00" level=error msg="[nxlog] Backend > crashed, trying to restart 2/3" > Oct 6 11:04:44 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:44-06:00" level=info msg="[nxlog] Starting (exec > driver)" > Oct 6 11:04:44 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:44-06:00" level=error msg="[nxlog] Collector exits > immediately, this should not happen! Please check your collector > configuration!" > Oct 6 11:04:44 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:44-06:00" level=error msg="[nxlog] Backend > crashed, trying to restart 3/3" > Oct 6 11:04:44 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:44-06:00" level=info msg="[nxlog] Configuration > change detected, rewriting configuration file." > Oct 6 11:04:44 <serverName> /usr/bin/graylog-collector-sidecar[1220]: > time="2016-10-06T11:04:44-06:00" level=info msg="[nxlog] Stopping" > > > > When looking at the Graylog web interface at System/Collectors > > Collectors I see: > > Status: failing > > Sidecar > Status: At least one backend with errors > > Backends > Nxlog: Collector failed to start after 3 tries! > > > Any help or guidance on trying to debug this and get it working? > > Thanks. > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/graylog2/c592aa99-1f37-49de-a740-96c08182101b%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/c592aa99-1f37-49de-a740-96c08182101b%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog Company Poolstraße 21 20335 Hamburg Germany https://www.graylog.com <https://www.torch.sh/> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMqbBbLwMvQUeCr31XyjxvJupT9LX6woGy6T4afUsKa1G2Mycg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
