I have installed Graylog Appliance v2.1 (1st machine) , i have installed graylog_collector_sidecar.exe on a Windows 2008 R2 (2nd machine), i have not installed winlogbeat.exe as it is embedded into the graylog directory communication is established between both machines
I have configured an input and output on a configuration linked to the Windows and iis tags (tags found in graylog_collector_sidecar.yml file) Graylogserver can see this collector When i run graylog_collector_sidecar.exe in a cmd for debug purpose, i can see that winlogbeat keeps on starting, then crashing with those logs : msg="[Winlogbeat] Starting <exec driver>" msg="[Winlogbeat] Configuration change detected, rewriting configuration file" msg="[Winlogbeat] Stopping" msg="[Winlogbeat] Backend crashed, trying to restart 1/3" .... msg="[Winlogbeat] Unable to start collector after 3 tries, giving up" msg="[Winlogbeat] Starting <exec driver>" On Graylog Appliance : - status of this collector loops between Running and Failing how can i avoid these never ending crash ? -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5e29b838-ee8d-4e5b-93f5-cb3baaca337c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
