Hi Phil, could you try to start the Sidecar in foreground mode. Just open a shell and go to the installation directory. Start the Sidecar with graylog-collector-sidecar. Post the output you see here, maybe we can see some problems.
Cheers, Marius On 29 July 2016 at 13:16, Phil Sumner <sumner.p...@gmail.com> wrote: > Hi, > > I'm having trouble getting sidecar/NXLog working with Windows. > > I've installed graylog-sidecar & nxlog on Windows Server 2008R2 and > installed/started it as a service. > > I've installed NXLog and removed the service. > > My collector_sidecar.yml looks like this (paths to nxlog all checked to be > correct): > server_url: http://10.x.x.x:12900 > update_interval: 10 > tls_skip_verify: false > node_id: shaadc02 > collector_id: file:C:\Program Files (x86)\graylog\collector-sidecar\ > collector-id > log_path: C:\Program Files (x86)\graylog\collector-sidecar\logs\ > log_rotation_time: 86400 > log_max_age: 604800 > tags: > - windows > backends: > - name: nxlog > enabled: false > binary_path: C:\Program Files (x86)\nxlog\nxlog.exe > configuration_path: C:\Program Files (x86)\graylog\collector-sidecar > \generated\nxlog.conf > > I've set up a collector configuration: > > > <https://lh3.googleusercontent.com/-byD9-nf2Npo/V5s4gtym70I/AAAAAAABbIE/-FAIf2eMvP8Zz4ayXLSDg4sZieia5vk1ACLcB/s1600/Capture.PNG> > > > > I can see the new collector checking in: > > > <https://lh3.googleusercontent.com/-zBvvbHYm2m8/V5s5Dj8oJEI/AAAAAAABbII/_R_NHjzGJOkVDkJsi0P_18sA-378FbX-QCLcB/s1600/Capture.PNG> > > > The snippet in the tag config is the default: > {{if .Linux}} > User nxlog > Group nxlog > Moduledir /usr/lib/nxlog/modules > CacheDir /var/spool/collector-sidecar/nxlog > PidFile /var/run/graylog/collector-sidecar/nxlog.pid > define LOGFILE /var/log/graylog/collector-sidecar/nxlog.log > LogFile %LOGFILE% > LogLevel INFO > > <Extension logrotate> > Module xm_fileop > <Schedule> > When @daily > Exec file_cycle('%LOGFILE%', 7); > </Schedule> > </Extension> > {{end}} > > {{if .Windows}} > Moduledir %ROOT%\modules > CacheDir %ROOT%\data > Pidfile %ROOT%\data\nxlog.pid > SpoolDir %ROOT%\data > LogFile %ROOT%\data\nxlog.log > LogLevel INFO > > <Extension logrotate> > Module xm_fileop > <Schedule> > When @daily > Exec file_cycle('%ROOT%\data\nxlog.log', 7); > </Schedule> > </Extension> > {{end}} > > > nxlog.conf is this: > define ROOT C:\Program Files (x86)\nxlog > > Moduledir %ROOT%\modules > CacheDir %ROOT%\data > Pidfile %ROOT%\data\nxlog.pid > SpoolDir %ROOT%\data > LogFile %ROOT%\data\nxlog.log > > <Extension gelf> > Module xm_gelf > </Extension> > > > But I never see anything in the ...\generated\ folder, and nxlog never > starts. > > > What am I missing? > > Thanks, > Phil > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to graylog2+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/2f94f695-e838-4e61-b4fa-8ea038df85f4%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/2f94f695-e838-4e61-b4fa-8ea038df85f4%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog Company Poolstraße 21 20335 Hamburg Germany https://www.graylog.com <https://www.torch.sh/> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMqbBbJ-VCDzyAtJ6KVfTsS9GG2YTL4Zu1UC3xJ2DUwRGOEo1Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
