Nagios Support Forum

For the benefit of others.... The issue is resolved. When you install tomcat and configure it according to the Apache docs part of that process is to give ownership of the tomcat directory to the tomcat user..... well that means that the rsyslog service can't get in there. chown the tomcat/logs dir ...

Great point on connections. I can see the host connected on port 5544 but not on 2056 And on the host it only shows connected to 5544. So for some reason rsyslog isn't wanting to use the config file. Just to make sure... here is my current conf from /etc/rsyslog.d/ /etc/rsyslog.d/90-nagioslogserver_...

The /var/log/logstash/logstash.log only has 4 errors in it and they are for another device. iptables shows all needed ports open and the 2056 port is taking traffic Chain INPUT (policy ACCEPT 144K packets, 212M bytes) pkts bytes target prot opt in out source destination 0 0 ACCEPT tcp -- * * 0.0.0.0...

Thanks for the reply. Still nothing coming after changing to port 2056

That is the one I used. The conf file gets created and rsyslog restarts successfully. By all rights it should be logging. I do see events from the OS coming in so I know rsyslog is sending something. I'm just not getting the catalina.out file. I am at a total loss on this one. Conf file created by s...

I haven't worked for Nagios for awhile now, but last I knew Ubuntu was not supported. I haven't been watching closely - but I'm not aware of that changing. Red Hat/CentOS is the recommended installation platform. To be clear: I'm not installing NLS on Ubuntu. Just wanting to get log events from it ...

A little more on this:

When I try the Manual option the first line gets this:

root@web1:/tmp# ls -d /var/lib/rsyslog || ls -d /var/spool/rsyslog || mkdir -v /var/spool/rsyslog
ls: cannot access '/var/lib/rsyslog': No such file or directory
/var/spool/rsyslog

Trying out NLS on Ubuntu 16. New install. I download and exec the sh script and the below is what I get. rsyslog is running. Restarted the service. Nothing going to NLS. Any advice would be appreciated root@web1:/tmp# bash setup-linux.sh -s logs.isonasnet.com -p 5544 Detected rsyslog 8.16.0 Detected...

Oh yeah, for sure. I did figure it out. Just commenting the solutions for others to benefit

For the benefit of others that may run across this with the same issue. The root cause was that when the SNMP role is installed to a Windows server the TCP firewall rule created has it active for all networks where as the UDP rule is only for Private networks. For what ever reason these two servers ...