I am able to make connection with telnet as well as with curl and even sending data. But with rsyslog this connection is not establishing due to which not able to send data. In syslog i am only getting this error:
'action 'action 7' suspended, next retry is Thu Feb 25 07:27:25 2016 [v8.16.0 tryhttp://www.rsyslog.com/e/2007 ]' On Wed, Mar 2, 2016 at 1:56 PM, David Lang <[email protected]> wrote: > so if one side says the connection is established and the other doesn't, > it's a firewall/iptables/SELinux type problem. It's happening at the OS > level below rsyslog > > you may get better info on the details of the error from rsyslog in debug > mode (rsyslogd -dn), but with a problem at this level, you may not. > > Until you are able to establish the network connection, nothing at a > higher level has a chance. Try using telnet or netcat to establish a > connection so that you know for sure that it's not a rsyslog problem. > > > David Lang > > On Wed, 2 Mar 2016, aditi sharma wrote: > > Some writing mistakes sorry. >> Centos is sending at remote host address: >> *.* @@my-remote-ip:514 >> The output of netstat at centos is as follows: >> tcp 0 0 0.0.0.0:514 0.0.0.0:* >> LISTEN >> 2103/rsyslogd >> tcp6 0 0 :::514 :::* LISTEN >> 2103/rsyslogd >> so this netstat command on centos is showing that its just listening but >> not establishing connection. But when both server are ubuntu based >> connection established. >> >> >> >> On Wed, Mar 2, 2016 at 1:02 PM, David Lang <[email protected]> wrote: >> >> well, the obvious problem is that you are sending to port 10515 but >>> listening on port 514 >>> >>> the sort of thing you stare at for hourse without seeing :-) >>> >>> David Lang >>> >>> On Wed, 2 Mar 2016, aditi sharma wrote: >>> >>> Date: Wed, 2 Mar 2016 12:35:21 +0530 >>> >>>> From: aditi sharma <[email protected]> >>>> Reply-To: rsyslog-users <[email protected]> >>>> To: rsyslog-users <[email protected]> >>>> Subject: Re: [rsyslog] rsyslog of centos is not able to establish >>>> connection >>>> >>>> with rsylog of central server(ubuntu) . >>>> >>>> I have disabled the firewall in centos. In the config file of centos, i >>>> just added this line at the end: >>>> *.* @@my-remote-ip:10514 >>>> >>>> and in server side(ubuntu) rsyslog, i just un-commented the following >>>> lines: >>>> $ModLoad imtcp >>>> $InputTCPServerRun 514 >>>> >>>> The output of netstat is as follows: >>>> tcp 0 0 0.0.0.0:514 0.0.0.0:* >>>> LISTEN >>>> 2103/rsyslogd >>>> tcp6 0 0 :::514 :::* >>>> LISTEN >>>> 2103/rsyslogd >>>> >>>> On Wed, Mar 2, 2016 at 11:45 AM, David Lang <[email protected]> wrote: >>>> >>>> we would need to see the configs to start figuring things out (we don't >>>> >>>>> know which of the couple dozen possible communication protocols you are >>>>> trying to use) >>>>> >>>>> It's also possible that there is a firewall between them that is >>>>> blocking >>>>> the traffic. >>>>> >>>>> David Lang >>>>> >>>>> On Wed, 2 Mar 2016, aditi sharma wrote: >>>>> >>>>> Date: Wed, 2 Mar 2016 11:38:12 +0530 >>>>> >>>>> From: aditi sharma <[email protected]> >>>>>> Reply-To: rsyslog-users <[email protected]> >>>>>> To: [email protected] >>>>>> Subject: [rsyslog] rsyslog of centos is not able to establish >>>>>> connection >>>>>> with >>>>>> rsylog of central server(ubuntu) . >>>>>> >>>>>> >>>>>> Hi, >>>>>> >>>>>> Here i have two server: 1) centos based 2) ubuntu based. >>>>>> I am trying to send logs from centos to ubuntu server using rsyslog. >>>>>> But >>>>>> between these two servers i am not seeing any connection. In message i >>>>>> am >>>>>> getting this type of error: >>>>>> >>>>>> 'action 'action 7' suspended, next retry is Thu Feb 25 07:27:25 2016 >>>>>> [v8.16.0 tryhttp://www.rsyslog.com/e/2007 ]' >>>>>> _______________________________________________ >>>>>> rsyslog mailing list >>>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>>> http://www.rsyslog.com/professional-services/ >>>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>>>> myriad >>>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>>>> DON'T LIKE THAT. >>>>>> >>>>>> _______________________________________________ >>>>>> >>>>>> rsyslog mailing list >>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>>> http://www.rsyslog.com/professional-services/ >>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a >>>>> myriad >>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>>> DON'T LIKE THAT. >>>>> >>>>> _______________________________________________ >>>>> >>>> rsyslog mailing list >>>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>>> http://www.rsyslog.com/professional-services/ >>>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>>> DON'T LIKE THAT. >>>> >>>> _______________________________________________ >>>> >>> rsyslog mailing list >>> http://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com/professional-services/ >>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >>> DON'T LIKE THAT. >>> >>> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you >> DON'T LIKE THAT. >> >> _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you > DON'T LIKE THAT. > _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
