Nagios Log Sources count not changing

[stecino]

Hello,

I am adding logsources to Nagios Log Server, and I can see the data being gathered, but Hosts count on Home page doesn't change. I have noticed this before as well.
Restarting logstash on all cluster nodes usually addresses the issue, but this time I can't even get that working. Any idea why this is the case?

Thanks in advance.

I am running 2015R1.1

[eloyd]

I have found that the count can take a while to update. Not sure why. You can always do a "top sources" query to see what's sending data.

[stecino]

I have found that the count can take a while to update. Not sure why. You can always do a "top sources" query to see what's sending data.

Its very sporadic, it will update right after the node is added, it may take couple of days even after all the logsources have been added. In my case it got updated, after two days.

[scottwilkerson]

We are looking into changing the algorithm that displays that to be a more accurate assessment, at best it currently only displays hosts it has received logs from that have dates in the last 24 hours

[eloyd]

What happens "at worst?"

[tmcdonald]

I think the "at worst" in this case is just displaying 1 host.

[stecino]

Another thing I have noticed is that when first you add let's say Linux Host as logsource, and then add application specific log files as Linux File logsource, logsource count isn't incremented.
What is the Host to logsource relationship?

Host = Server? or Host = number of configurations to send out logs?

[scottwilkerson]

In this context
Host = Server