so if one side says the connection is established and the other doesn't, it's a firewall/iptables/SELinux type problem. It's happening at the OS level below rsyslog

you may get better info on the details of the error from rsyslog in debug mode (rsyslogd -dn), but with a problem at this level, you may not.

Until you are able to establish the network connection, nothing at a higher level has a chance. Try using telnet or netcat to establish a connection so that you know for sure that it's not a rsyslog problem.

David Lang

 On Wed, 2 Mar 2016, aditi sharma wrote:

Some writing mistakes sorry.
Centos is sending at remote host address:
*.* @@my-remote-ip:514
The output of netstat at centos is as follows:
tcp        0      0 0.0.0.0:514             0.0.0.0:*               LISTEN
    2103/rsyslogd
tcp6       0      0 :::514                  :::*                    LISTEN
    2103/rsyslogd
so this netstat command on centos is showing that its just listening but
not establishing connection. But when both server are ubuntu based
connection established.



On Wed, Mar 2, 2016 at 1:02 PM, David Lang <[email protected]> wrote:

well, the obvious problem is that you are sending to port 10515 but
listening on port 514

the sort of thing you stare at for hourse without seeing :-)

David Lang

On Wed, 2 Mar 2016, aditi sharma wrote:

Date: Wed, 2 Mar 2016 12:35:21 +0530
From: aditi sharma <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: rsyslog-users <[email protected]>
Subject: Re: [rsyslog] rsyslog of centos is not able to establish
connection

    with rsylog of central server(ubuntu) .

I have disabled the firewall in centos. In the config file of centos, i
just added this line at the end:
*.* @@my-remote-ip:10514

and in server side(ubuntu) rsyslog, i just un-commented the following
lines:
$ModLoad imtcp
$InputTCPServerRun 514

The output of netstat is as follows:
tcp        0      0 0.0.0.0:514             0.0.0.0:*
 LISTEN
    2103/rsyslogd
tcp6       0      0 :::514                  :::*                    LISTEN
    2103/rsyslogd

On Wed, Mar 2, 2016 at 11:45 AM, David Lang <[email protected]> wrote:

we would need to see the configs to start figuring things out (we don't
know which of the couple dozen possible communication protocols you are
trying to use)

It's also possible that there is a firewall between them that is blocking
the traffic.

David Lang

On Wed, 2 Mar 2016, aditi sharma wrote:

Date: Wed, 2 Mar 2016 11:38:12 +0530

From: aditi sharma <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: [email protected]
Subject: [rsyslog] rsyslog of centos is not able to establish connection
with
    rsylog of central server(ubuntu) .


Hi,

Here i have two server: 1) centos based 2) ubuntu based.
I am trying to send logs from centos to ubuntu server using rsyslog. But
between these two servers i am not seeing any connection. In message i
am
getting this type of error:

'action 'action 7' suspended, next retry is Thu Feb 25 07:27:25 2016
[v8.16.0 tryhttp://www.rsyslog.com/e/2007 ]'
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

_______________________________________________

rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to