Log Server not showing syslogs

[b3l33]

Hello,

I am evaluating Log Server. I have followed the basic instructions for full manual install on CentOS7 and run the Linux script on an Ubuntu 14.04 desktop to send syslogs to the server on port.

I don't see any of the Ubuntu's logs showing up in the Log Server Dashboard.

I have done basic testing using

logger -p local7.notice "XX10XX"

on the Ubunutu machine. I can see these tracing in /var/log/syslog. I can also see that each entry corresponds with a hit to the listener port on the server with tcpdump.

Can someone please help me trouble shoot?

Thank you.

--Ben

[hsmith]

A few questions:

What port are the logs sending to?
Is said port open in the firewall on the NLS machine?

What are the outputs of the following commands?

Code: Select all

systemctl status logstash elasticsearch firewalld
tail -n25 /var/log/elasticsearch/*.log
tail -n25 /var/log/messages
free -m
top | head -n5

[b3l33]

Thank you for your fast reply.

I was confused. I can see that the logs are there. I just needed to learn how to filter my view correctly.

[Box293]

Does this article provide you with the information you are after?

https://support.nagios.com/kb/article.php?id=297