Re: [graylog2] Re: Cannot Configure Collector Inputs

[Ciprian]

I seem to have got it to run, since I am getting every command entered, 
ssh, etc. but it is working via the rsyslog and not from the collector 
because I had to insert something in the 90-graylog file to get it to 
actually send something

On Tuesday, August 30, 2016 at 2:14:00 PM UTC+2, Marius Sturm wrote:
>
> The input should listen on 0.0.0.0, right.
>
> On 30 August 2016 at 13:17, Ciprian  
> wrote:
>
>> I have also changed 514 to 12201. In system>inputs I need to have a GELF 
>> UDP input with the ip 0.0.0.0 right? Or the IP of the sidecar server?
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to graylog2+u...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/graylog2/499522ab-3704-41b8-ad1d-7cdb427bc85a%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> -- 
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com 
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a8f2e472-6368-4d6b-b00e-80e5742eaea9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Ciprian]

It is on 0.0.0.0, I have several inputs running on it, still nothing.

On Tuesday, August 30, 2016 at 2:14:00 PM UTC+2, Marius Sturm wrote:
>
> The input should listen on 0.0.0.0, right.
>
> On 30 August 2016 at 13:17, Ciprian  
> wrote:
>
>> I have also changed 514 to 12201. In system>inputs I need to have a GELF 
>> UDP input with the ip 0.0.0.0 right? Or the IP of the sidecar server?
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to graylog2+u...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/graylog2/499522ab-3704-41b8-ad1d-7cdb427bc85a%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> -- 
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com 
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/fe1875a2-3e06-4184-91be-15ba279bd10d%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Marius Sturm]

The input should listen on 0.0.0.0, right.

On 30 August 2016 at 13:17, Ciprian  wrote:

> I have also changed 514 to 12201. In system>inputs I need to have a GELF
> UDP input with the ip 0.0.0.0 right? Or the IP of the sidecar server?
>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/499522ab-3704-41b8-ad1d-7cdb427bc85a%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com 

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBbJm%2BY3UCYQX%3DxBjDSdAydQ7B87Trv_EAOCBo5iLq3%2BuWw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Ciprian]

I have also changed 514 to 12201. In system>inputs I need to have a GELF 
UDP input with the ip 0.0.0.0 right? Or the IP of the sidecar server?

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/499522ab-3704-41b8-ad1d-7cdb427bc85a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Ciprian]

Hey, I have changed the IP on Input at system>collectors>manage connections 
and I have set the IP to 192.168.1.54 (the ip of the server where sidecar 
is installed) I have 2 servers one that is running graylog2 server and web 
and the other is running the sidecar.
This is what I get in /var/log/graylog/collector-sidecar/nxlog.log

2016-08-30 03:43:52 ERROR om_udp apr_socket_send failed;Connection refused
2016-08-30 03:43:53 INFO reconnecting in 1 seconds
2016-08-30 03:43:53 ERROR om_udp apr_socket_send failed;Connection refused
2016-08-30 03:52:51 INFO configuration OK
2016-08-30 03:52:54 INFO nxlog-ce-2.9.1716 started

Thanks.

On Tuesday, August 30, 2016 at 12:48:08 PM UTC+2, Marius Sturm wrote:
>
> Hi,
> your IP 0.0.0.0 looks wrong, when the Sidecar is running on the same 
> machine use 127.0.0.1 otherwise the external IP of the Graylog server like 
> 192.168.X.X
> You can also check the log files in /var/log/graylog/collector-sidecar/* 
> for more help on this.
>
> Cheers,
> Marius
>
>
> On 30 August 2016 at 12:28, Ciprian  
> wrote:
>
>> First of all thank you for the quick reply!
>> I have set an output with the type gelf udp output, the server ip as 
>> 0.0.0.0 and port 514.
>> I have also set an input with the type file input and the path being 
>> /var/log/auth.log and the poll interval 1.
>> When I go to the collector and click show messages I still don't have 
>> anything, and yes I have updated the tag. Everything I'm using this one is 
>> ubuntu 16.04 by the way.
>> Been struggling with this since Thursday and I didn't manage to get any 
>> workaround so any help would be much appreciated.
>> Thank you.
>>
>> On Tuesday, August 30, 2016 at 11:51:20 AM UTC+2, Marius Sturm wrote:
>>>
>>> Hi Ciprian,
>>> you dont need to install anything on the server side, the Graylog 
>>> collector plugin, that is needed for the Sidecar to work, is already 
>>> included in the standard installation.
>>> When the Sidecar is registered under System->Collectors the only thing 
>>> you have to do is to click on 'Manage configurations' and create a new one 
>>> with a Gelf output pointing to your server address and a file or Windows 
>>> event input with the settings you need. Apply the same tag you used for the 
>>> Sidecar to associate this configuration with the running Sidecar.
>>>
>>> Cheers,
>>> Marius
>>>
>>>
>>> On 30 August 2016 at 11:43, Ciprian  wrote:
>>>
 Hey, did you have to install collector on both the graylog server 
 machine and the host you are trying to gather logs from?
 My collector is popping on the system>collectors icon but I cannot get 
 any messages from it, I do not know why, and I am quite stuck, can you 
 help 
 me please?
 Thanks

 -- 
 You received this message because you are subscribed to the Google 
 Groups "Graylog Users" group.
 To unsubscribe from this group and stop receiving emails from it, send 
 an email to graylog2+u...@googlegroups.com.
 To view this discussion on the web visit 
 https://groups.google.com/d/msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com
  
 
 .

 For more options, visit https://groups.google.com/d/optout.

>>>
>>>
>>>
>>> -- 
>>> Developer
>>>
>>> Tel.: +49 (0)40 609 452 077
>>> Fax.: +49 (0)40 609 452 078
>>>
>>> TORCH GmbH - A Graylog Company
>>> Poolstraße 21
>>> 20335 Hamburg
>>> Germany
>>>
>>> https://www.graylog.com 
>>>
>>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
>>> Geschäftsführer: Lennart Koopmann (CEO)
>>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to graylog2+u...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> -- 
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com 
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Marius Sturm]

Additionally port 514 indicates that you are sending gelf messages to a
syslog receiver. Both protocols are not compatible, you need a gelf sender
(nxlog) and a gelf receiver (graylog server with started gelf input).

\Marius

On 30 August 2016 at 12:48, Marius Sturm  wrote:

> Hi,
> your IP 0.0.0.0 looks wrong, when the Sidecar is running on the same
> machine use 127.0.0.1 otherwise the external IP of the Graylog server like
> 192.168.X.X
> You can also check the log files in /var/log/graylog/collector-sidecar/*
> for more help on this.
>
> Cheers,
> Marius
>
>
> On 30 August 2016 at 12:28, Ciprian  wrote:
>
>> First of all thank you for the quick reply!
>> I have set an output with the type gelf udp output, the server ip as
>> 0.0.0.0 and port 514.
>> I have also set an input with the type file input and the path being
>> /var/log/auth.log and the poll interval 1.
>> When I go to the collector and click show messages I still don't have
>> anything, and yes I have updated the tag. Everything I'm using this one is
>> ubuntu 16.04 by the way.
>> Been struggling with this since Thursday and I didn't manage to get any
>> workaround so any help would be much appreciated.
>> Thank you.
>>
>> On Tuesday, August 30, 2016 at 11:51:20 AM UTC+2, Marius Sturm wrote:
>>>
>>> Hi Ciprian,
>>> you dont need to install anything on the server side, the Graylog
>>> collector plugin, that is needed for the Sidecar to work, is already
>>> included in the standard installation.
>>> When the Sidecar is registered under System->Collectors the only thing
>>> you have to do is to click on 'Manage configurations' and create a new one
>>> with a Gelf output pointing to your server address and a file or Windows
>>> event input with the settings you need. Apply the same tag you used for the
>>> Sidecar to associate this configuration with the running Sidecar.
>>>
>>> Cheers,
>>> Marius
>>>
>>>
>>> On 30 August 2016 at 11:43, Ciprian  wrote:
>>>
 Hey, did you have to install collector on both the graylog server
 machine and the host you are trying to gather logs from?
 My collector is popping on the system>collectors icon but I cannot get
 any messages from it, I do not know why, and I am quite stuck, can you help
 me please?
 Thanks

 --
 You received this message because you are subscribed to the Google
 Groups "Graylog Users" group.
 To unsubscribe from this group and stop receiving emails from it, send
 an email to graylog2+u...@googlegroups.com.
 To view this discussion on the web visit https://groups.google.com/d/ms
 gid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com
 
 .

 For more options, visit https://groups.google.com/d/optout.

>>>
>>>
>>>
>>> --
>>> Developer
>>>
>>> Tel.: +49 (0)40 609 452 077
>>> Fax.: +49 (0)40 609 452 078
>>>
>>> TORCH GmbH - A Graylog Company
>>> Poolstraße 21
>>> 20335 Hamburg
>>> Germany
>>>
>>> https://www.graylog.com 
>>>
>>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
>>> Geschäftsführer: Lennart Koopmann (CEO)
>>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to graylog2+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/ms
>> gid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> --
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com 
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com 

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBbJGajVV3_CBiMbZDDB6N7fPHMp6iiqzgUOS3TvAroG_Hw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Marius Sturm]

Hi,
your IP 0.0.0.0 looks wrong, when the Sidecar is running on the same
machine use 127.0.0.1 otherwise the external IP of the Graylog server like
192.168.X.X
You can also check the log files in /var/log/graylog/collector-sidecar/*
for more help on this.

Cheers,
Marius


On 30 August 2016 at 12:28, Ciprian  wrote:

> First of all thank you for the quick reply!
> I have set an output with the type gelf udp output, the server ip as
> 0.0.0.0 and port 514.
> I have also set an input with the type file input and the path being
> /var/log/auth.log and the poll interval 1.
> When I go to the collector and click show messages I still don't have
> anything, and yes I have updated the tag. Everything I'm using this one is
> ubuntu 16.04 by the way.
> Been struggling with this since Thursday and I didn't manage to get any
> workaround so any help would be much appreciated.
> Thank you.
>
> On Tuesday, August 30, 2016 at 11:51:20 AM UTC+2, Marius Sturm wrote:
>>
>> Hi Ciprian,
>> you dont need to install anything on the server side, the Graylog
>> collector plugin, that is needed for the Sidecar to work, is already
>> included in the standard installation.
>> When the Sidecar is registered under System->Collectors the only thing
>> you have to do is to click on 'Manage configurations' and create a new one
>> with a Gelf output pointing to your server address and a file or Windows
>> event input with the settings you need. Apply the same tag you used for the
>> Sidecar to associate this configuration with the running Sidecar.
>>
>> Cheers,
>> Marius
>>
>>
>> On 30 August 2016 at 11:43, Ciprian  wrote:
>>
>>> Hey, did you have to install collector on both the graylog server
>>> machine and the host you are trying to gather logs from?
>>> My collector is popping on the system>collectors icon but I cannot get
>>> any messages from it, I do not know why, and I am quite stuck, can you help
>>> me please?
>>> Thanks
>>>
>>> --
>>> You received this message because you are subscribed to the Google
>>> Groups "Graylog Users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to graylog2+u...@googlegroups.com.
>>> To view this discussion on the web visit https://groups.google.com/d/ms
>>> gid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com
>>> 
>>> .
>>>
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>>
>>
>> --
>> Developer
>>
>> Tel.: +49 (0)40 609 452 077
>> Fax.: +49 (0)40 609 452 078
>>
>> TORCH GmbH - A Graylog Company
>> Poolstraße 21
>> 20335 Hamburg
>> Germany
>>
>> https://www.graylog.com 
>>
>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
>> Geschäftsführer: Lennart Koopmann (CEO)
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com 

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBb%2B1cK1Jfju2GH7CHntt5WksJ_QpUCU-8dcYJ3r84HeeSw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Ciprian]

First of all thank you for the quick reply!
I have set an output with the type gelf udp output, the server ip as 
0.0.0.0 and port 514.
I have also set an input with the type file input and the path being 
/var/log/auth.log and the poll interval 1.
When I go to the collector and click show messages I still don't have 
anything, and yes I have updated the tag. Everything I'm using this one is 
ubuntu 16.04 by the way.
Been struggling with this since Thursday and I didn't manage to get any 
workaround so any help would be much appreciated.
Thank you.

On Tuesday, August 30, 2016 at 11:51:20 AM UTC+2, Marius Sturm wrote:
>
> Hi Ciprian,
> you dont need to install anything on the server side, the Graylog 
> collector plugin, that is needed for the Sidecar to work, is already 
> included in the standard installation.
> When the Sidecar is registered under System->Collectors the only thing you 
> have to do is to click on 'Manage configurations' and create a new one with 
> a Gelf output pointing to your server address and a file or Windows event 
> input with the settings you need. Apply the same tag you used for the 
> Sidecar to associate this configuration with the running Sidecar.
>
> Cheers,
> Marius
>
>
> On 30 August 2016 at 11:43, Ciprian  
> wrote:
>
>> Hey, did you have to install collector on both the graylog server machine 
>> and the host you are trying to gather logs from?
>> My collector is popping on the system>collectors icon but I cannot get 
>> any messages from it, I do not know why, and I am quite stuck, can you help 
>> me please?
>> Thanks
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to graylog2+u...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> -- 
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com 
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/a642b278-d443-4bec-81cd-f14c0d2ee0c1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Marius Sturm]

Hi Ciprian,
you dont need to install anything on the server side, the Graylog collector
plugin, that is needed for the Sidecar to work, is already included in the
standard installation.
When the Sidecar is registered under System->Collectors the only thing you
have to do is to click on 'Manage configurations' and create a new one with
a Gelf output pointing to your server address and a file or Windows event
input with the settings you need. Apply the same tag you used for the
Sidecar to associate this configuration with the running Sidecar.

Cheers,
Marius


On 30 August 2016 at 11:43, Ciprian  wrote:

> Hey, did you have to install collector on both the graylog server machine
> and the host you are trying to gather logs from?
> My collector is popping on the system>collectors icon but I cannot get any
> messages from it, I do not know why, and I am quite stuck, can you help me
> please?
> Thanks
>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com 

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBbKN%2BeywK681hbwhwNNFFAC%3D3pTpfuyck_oQ1ah_rUM9NQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Cannot Configure Collector Inputs

[Ciprian]

Hey, did you have to install collector on both the graylog server machine 
and the host you are trying to gather logs from?
My collector is popping on the system>collectors icon but I cannot get any 
messages from it, I do not know why, and I am quite stuck, can you help me 
please?
Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/760262d6-c1ab-49bb-864c-12ef0c8e067b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Tony]

Thank you Marius,
everything works well.

2016-07-27 9:54 GMT+01:00 Marius Sturm :

> Hi Tony,
> the collector option is implemented as a plugin. So please check in your
> server configuration the plugin_dir directive and that the collector plugin
> is actually located in that directory.
>
>
> Cheers,
> Marius
>
>
> On 26 July 2016 at 18:32, Tony  wrote:
>
>> Hi Marius,
>> sorry to resume this post, but I have a problem in Graylog 2.0 server I
>> installed it on Debian 8 by repository and following this procedure:
>> http://docs.graylog.org/en/2.0/pages/installation/operating_system_packages.html
>> unfortunately I wanna to collect logs from a remote apache server using
>> graylog-collector-sidecar but in the Graylog server I don't find the
>> Collector choice in System menu. Any ida to help me please?
>>
>> Thanks
>>
>> Tony
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to graylog2+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/graylog2/b484a3e2-4413-4201-8078-aff336a51fa2%40googlegroups.com
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> --
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com 
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>
> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Graylog Users" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/graylog2/Matz1rRHBgU/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/CAMqbBbLZTN_RE17N8vSnyVXGhDTr%2BU-fQ2k_5LG62u-z0mm6Ew%40mail.gmail.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CACjATf8K5M1L95GFk8fBYr2DyAg0YVSUoNmVhctT0bBspaJJ%3DQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [graylog2] Re: Cannot Configure Collector Inputs

[Marius Sturm]

Hi Tony,
the collector option is implemented as a plugin. So please check in your
server configuration the plugin_dir directive and that the collector plugin
is actually located in that directory.


Cheers,
Marius


On 26 July 2016 at 18:32, Tony  wrote:

> Hi Marius,
> sorry to resume this post, but I have a problem in Graylog 2.0 server I
> installed it on Debian 8 by repository and following this procedure:
> http://docs.graylog.org/en/2.0/pages/installation/operating_system_packages.html
> unfortunately I wanna to collect logs from a remote apache server using
> graylog-collector-sidecar but in the Graylog server I don't find the
> Collector choice in System menu. Any ida to help me please?
>
> Thanks
>
> Tony
>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/b484a3e2-4413-4201-8078-aff336a51fa2%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com 

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBbLZTN_RE17N8vSnyVXGhDTr%2BU-fQ2k_5LG62u-z0mm6Ew%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Re: Cannot Configure Collector Inputs

[Tony]

Hi Marius,
sorry to resume this post, but I have a problem in Graylog 2.0 server I 
installed it on Debian 8 by repository and following this 
procedure: 
http://docs.graylog.org/en/2.0/pages/installation/operating_system_packages.html
 
unfortunately I wanna to collect logs from a remote apache server using 
graylog-collector-sidecar but in the Graylog server I don't find the 
Collector choice in System menu. Any ida to help me please?

Thanks

Tony

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/b484a3e2-4413-4201-8078-aff336a51fa2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.