there are other errors before that.
does SELinux allow the init started version of rsyslog to connect out to the
network?
try running rsyslogd -dn (debug mode, don't background) and capture the output
up until the first log is delivered or the first suspended message is created.
David Lang
On Wed, 2 Mar 2016, aditi sharma wrote:
I am able to make connection with telnet as well as with curl and even
sending data. But with rsyslog this connection is not establishing due to
which not able to send data. In syslog i am only getting this error:
'action 'action 7' suspended, next retry is Thu Feb 25 07:27:25 2016
[v8.16.0 tryhttp://www.rsyslog.com/e/2007 ]'
On Wed, Mar 2, 2016 at 1:56 PM, David Lang <[email protected]> wrote:
so if one side says the connection is established and the other doesn't,
it's a firewall/iptables/SELinux type problem. It's happening at the OS
level below rsyslog
you may get better info on the details of the error from rsyslog in debug
mode (rsyslogd -dn), but with a problem at this level, you may not.
Until you are able to establish the network connection, nothing at a
higher level has a chance. Try using telnet or netcat to establish a
connection so that you know for sure that it's not a rsyslog problem.
David Lang
On Wed, 2 Mar 2016, aditi sharma wrote:
Some writing mistakes sorry.
Centos is sending at remote host address:
*.* @@my-remote-ip:514
The output of netstat at centos is as follows:
tcp 0 0 0.0.0.0:514 0.0.0.0:*
LISTEN
2103/rsyslogd
tcp6 0 0 :::514 :::* LISTEN
2103/rsyslogd
so this netstat command on centos is showing that its just listening but
not establishing connection. But when both server are ubuntu based
connection established.
On Wed, Mar 2, 2016 at 1:02 PM, David Lang <[email protected]> wrote:
well, the obvious problem is that you are sending to port 10515 but
listening on port 514
the sort of thing you stare at for hourse without seeing :-)
David Lang
On Wed, 2 Mar 2016, aditi sharma wrote:
Date: Wed, 2 Mar 2016 12:35:21 +0530
From: aditi sharma <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: rsyslog-users <[email protected]>
Subject: Re: [rsyslog] rsyslog of centos is not able to establish
connection
with rsylog of central server(ubuntu) .
I have disabled the firewall in centos. In the config file of centos, i
just added this line at the end:
*.* @@my-remote-ip:10514
and in server side(ubuntu) rsyslog, i just un-commented the following
lines:
$ModLoad imtcp
$InputTCPServerRun 514
The output of netstat is as follows:
tcp 0 0 0.0.0.0:514 0.0.0.0:*
LISTEN
2103/rsyslogd
tcp6 0 0 :::514 :::*
LISTEN
2103/rsyslogd
On Wed, Mar 2, 2016 at 11:45 AM, David Lang <[email protected]> wrote:
we would need to see the configs to start figuring things out (we don't
know which of the couple dozen possible communication protocols you are
trying to use)
It's also possible that there is a firewall between them that is
blocking
the traffic.
David Lang
On Wed, 2 Mar 2016, aditi sharma wrote:
Date: Wed, 2 Mar 2016 11:38:12 +0530
From: aditi sharma <[email protected]>
Reply-To: rsyslog-users <[email protected]>
To: [email protected]
Subject: [rsyslog] rsyslog of centos is not able to establish
connection
with
rsylog of central server(ubuntu) .
Hi,
Here i have two server: 1) centos based 2) ubuntu based.
I am trying to send logs from centos to ubuntu server using rsyslog.
But
between these two servers i am not seeing any connection. In message i
am
getting this type of error:
'action 'action 7' suspended, next retry is Thu Feb 25 07:27:25 2016
[v8.16.0 tryhttp://www.rsyslog.com/e/2007 ]'
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
