Nagios Support Forum

I sent it on friday.
Thanks

/var/log/syslog: Apr 17 22:20:09 logoweb_app apache_access: 89.133.xx.xx - - [17/Apr/2020:22:20:08 +0200] "GET /download/index.php?id=49499 HTTP/1.1" 302 3870 "http://www.example.hu/?tart=63" "Mozilla/5.0 (Linux; Android 9; ANE-L X1) AppleWebKit/537.36 (KHTML, like Gecko) Ch...

Such lines appear: {:timestamp=>"2020-04-17T22:20:25.652000+0200", :message=>"output received", :event=>{"message"=>"<133>Apr 17 22:20:19 logoweb_app apache_access: 89.133.xx.xx - - [17/Apr/2020:22:20:09 +0200] \"GET /static/tempP df/49499/97ren29.pdf HTTP/1.1...

Events now:

Inputs:

Yes, 192.168.35.11 is the problematic Ubuntu 18. I have an Ubuntu 16 in this network, thats works correctly, i attached it's screenshot before. I reconfigured the 35.11 again with the automatic apache script, I attach the config files. Rsyslog will be in the next post, because 3 max... port 5544 lin...

type ok, but same problem:

Same situtation on 5545 port:

apache_access is <133> always, so this seems any type maybe. Real syslog has another number: 2020-04-16T21:09:18.981+02:00 192.168.35.11 syslog <30>Apr 16 19:09:17 logoweb_app systemd[1]: Started Clean php session files. 2020-04-16T21:09:18.758+02:00 192.168.35.11 syslog <30>Apr 16 19:09:16 app syst...

I didn't change logformats, I use the default apache2 package formats: user@webapp:~$ sudo grep -R LogFormat /etc/apache2 /etc/apache2/apache2.conf:LogFormat "%v:%p %h %l %u %t \"%r\" %>s %O \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined /etc/apache2/apach...