Re: [pmacct-discussion] pmacct -1.5.0rc3 rabbitmq integration issue.
Hi All, Thanks Nick and Paolo, it's routing key issue. Now I am getting output value in logstash. Also I am planning to create [ELK Stack] Kibana dashboard for bandwidth monitoring also which user consuming higher bandwidth. -Dhanasekaran. Did I learn something today? If not, I wasted it. On Sat, Jul 19, 2014 at 5:26 PM, Paolo Lucente wrote: > Hi Dhanasekaran, > > Building on Nick's answer: I see pmacct publishes on routing key '5m_ipip' > whereas the consumer part, which you left to default values, expects data > on 'acct' routing key. You should align the two. > > Cheers, > Paolo > > On Fri, Jul 18, 2014 at 09:30:16AM +0200, Nick Douma wrote: > > Hi, > > > > On 17-07-14 20:08, Dhanasekaran Anbalagan wrote: > > > I am trying to integrate pmacct with logstash. I already tired print > > > plugin to write to flat-files it's working. Now I am trying to > integrate > > > with rabbitmq. It's not working.. > > > > > > I went to rabbitmq admin. I don't see any message queues. Also tired > > > Debug mode > > > > > > I seen some Json data printing. But actually It's not sending to > > > rabbitmq exchange. But Exchange name created in rabbitmq end, > > > > > > console log: > > > http://paste.ubuntu.com/7809820/ > > > > In your log I see: > > > > ... publishing [E=pmacct RK=5m_ipip DM=0] ... > > > > I read this as publishing to Exchange "pmacct" with routing key > > "5m_ipip". Are you sure that your config is properly loaded by pmacct? > > > > King regards, > > > > Nick Douma > > > > > > > ___ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] pmacct -1.5.0rc3 rabbitmq integration issue.
Hi Dhanasekaran, Building on Nick's answer: I see pmacct publishes on routing key '5m_ipip' whereas the consumer part, which you left to default values, expects data on 'acct' routing key. You should align the two. Cheers, Paolo On Fri, Jul 18, 2014 at 09:30:16AM +0200, Nick Douma wrote: > Hi, > > On 17-07-14 20:08, Dhanasekaran Anbalagan wrote: > > I am trying to integrate pmacct with logstash. I already tired print > > plugin to write to flat-files it's working. Now I am trying to integrate > > with rabbitmq. It's not working.. > > > > I went to rabbitmq admin. I don't see any message queues. Also tired > > Debug mode > > > > I seen some Json data printing. But actually It's not sending to > > rabbitmq exchange. But Exchange name created in rabbitmq end, > > > > console log: > > http://paste.ubuntu.com/7809820/ > > In your log I see: > > ... publishing [E=pmacct RK=5m_ipip DM=0] ... > > I read this as publishing to Exchange "pmacct" with routing key > "5m_ipip". Are you sure that your config is properly loaded by pmacct? > > King regards, > > Nick Douma > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] pmacct -1.5.0rc3 rabbitmq integration issue.
Hi, On 17-07-14 20:08, Dhanasekaran Anbalagan wrote: > I am trying to integrate pmacct with logstash. I already tired print > plugin to write to flat-files it's working. Now I am trying to integrate > with rabbitmq. It's not working.. > > I went to rabbitmq admin. I don't see any message queues. Also tired > Debug mode > > I seen some Json data printing. But actually It's not sending to > rabbitmq exchange. But Exchange name created in rabbitmq end, > > console log: > http://paste.ubuntu.com/7809820/ In your log I see: ... publishing [E=pmacct RK=5m_ipip DM=0] ... I read this as publishing to Exchange "pmacct" with routing key "5m_ipip". Are you sure that your config is properly loaded by pmacct? King regards, Nick Douma signature.asc Description: OpenPGP digital signature ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
[pmacct-discussion] pmacct -1.5.0rc3 rabbitmq integration issue.
Hi Guys, I am trying to integrate pmacct with logstash. I already tired print plugin to write to flat-files it's working. Now I am trying to integrate with rabbitmq. It's not working.. I went to rabbitmq admin. I don't see any message queues. Also tired Debug mode I seen some Json data printing. But actually It's not sending to rabbitmq exchange. But Exchange name created in rabbitmq end, console log: http://paste.ubuntu.com/7809820/ [~]$ rabbitmqctl list_exchanges Listing exchanges ... direct amq.direct direct amq.fanout fanout amq.headers headers amq.match headers amq.rabbitmq.log topic amq.rabbitmq.trace topic amq.topic topic pmacct direc My Config file: [~]$ cat /etc/nfacctd_amqp.conf nfacctd_ip: 192.168.70.54 nfacctd_port: 9998 plugin_pipe_size: 32576000 plugin_buffer_size: 325760 debug: true daemonize: false nfacctd_disable_checks: true nfacctd_time_new: true ! AMQP connection details amqp_host: localhost amqp_user: guest amqp_passwd: guest amqp_exchange: pmacct amqp_routing_key: acct plugins: amqp[5m_ipip] ! 5 minutely IP to IP aggregate[5m_ipip]: src_host, dst_host, src_port, dst_port, proto, peer_src_ip amqp_routing_key[5m_ipip]: 5m_ipip amqp_history[5m_ipip]: 5m amqp_time_roundoff[5m_ipip]: m amqp_refresh_time[5m_ipip]: 300 I tried Example Program ~/pmacct-1.5.0rc3/examples/amqp. It's not working. [~/pmacct-1.5.0rc3/examples/amqp]$ vim amqp_receiver.py [~/pmacct-1.5.0rc3/examples/amqp]$ python amqp_receiver.py [*] Example inspired from: http://www.rabbitmq.com/getstarted.html [*] Waiting for messages on E=pmacct,direct RK=acct Q=acct_1 H=localhost. Edit code to change any parameter. To exit press CTRL+C [~]$ rabbitmqctl list_bindings Listing bindings ... exchange acct_1 queue acct_1 [] exchange hello queue hello [] pmacct exchange acct_1 queue acct [] ...done. [~]$ Please guide me. How to fix this. -Dhanasekaran. Did I learn something today? If not, I wasted it. ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
