Do we have any cap for log Sources?

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
srinivasmandalika
Posts: 51
Joined: Thu Oct 20, 2016 4:09 pm

Do we have any cap for log Sources?

Post by srinivasmandalika »

I am trying add log sources to the nagios log server, but no matter how many log sources I add, I can see only 11...

Can someone help me to add more log sources please?

Thanks!

Srinivas Mandalika
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Do we have any cap for log Sources?

Post by mcapra »

There is no cap on sources for the free version; Only on total traffic.

The "Receiving logs from X hosts" message can be inaccurate at times. Are the sources you are adding actively sending logs? Do you see those logs in the dashboard when you search for the IP address or hostname of the source you added?
Former Nagios employee
https://www.mcapra.com/
srinivasmandalika
Posts: 51
Joined: Thu Oct 20, 2016 4:09 pm

Re: Do we have any cap for log Sources?

Post by srinivasmandalika »

We have bought a license for single instance and this is not a free version...

So, going by that, we don't have a cap... right? Then, why could not I see any more log sources?

Srinivas Mandalika
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Do we have any cap for log Sources?

Post by mcapra »

Ah, there is no sources cap at any rate. I would recommend contacting our sales department and having them whitelist your forum account for the "Customer Support" section if you haven't done so yet :)
Then, why could not I see any more log sources?
I would start by examining the inputs you have configured for your Nagios Log Server machine (acquired via grep '' /usr/local/nagioslogserver/logstash/etc/conf.d/*) and the rsyslog/nxlog inputs on the machines you are not receiving logs from. Can you provide those things for me to look at?
Former Nagios employee
https://www.mcapra.com/
srinivasmandalika
Posts: 51
Joined: Thu Oct 20, 2016 4:09 pm

Re: Do we have any cap for log Sources?

Post by srinivasmandalika »

I added the output file and added one of the machine's conf and log file... I cannot add more as this says "Cannot add another attachment, 3 is the maximum." ...
You do not have the required permissions to view the files attached to this post.
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: Do we have any cap for log Sources?

Post by dwhitfield »

@srinivasmandalika, feel free to PM me the additional logs. Alternatively, you could just post them in a separate post. You could zip them all up and post the zip, if you like.

If you do PM me the additional logs, please update this forum thread so that the thread will pop back up on our dashboard.

UPDATE: logs received and shared with techs
srinivasmandalika
Posts: 51
Joined: Thu Oct 20, 2016 4:09 pm

Re: Do we have any cap for log Sources?

Post by srinivasmandalika »

I just sent the personal message...

Srinivas Mandalika
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Do we have any cap for log Sources?

Post by mcapra »

All of your configurations look good. Can you share the contents of the following files:

Code: Select all

/var/log/logstash/logstash.log
/var/log/elasticsearch/4aa88b36-6e32-4c15-992e-78e1784d646c.log
If you are using the latest version of Nagios Log Server (1.4.4), can you also post a system profile? You can gather a profile via Administration->System Status->Download System Profile.
Former Nagios employee
https://www.mcapra.com/
srinivasmandalika
Posts: 51
Joined: Thu Oct 20, 2016 4:09 pm

Re: Do we have any cap for log Sources?

Post by srinivasmandalika »

Please find the required files as attached...

Srinivas Mandalika
You do not have the required permissions to view the files attached to this post.
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Do we have any cap for log Sources?

Post by mcapra »

Can you share the output of:

Code: Select all

service logstash restart
tail -f /var/log/logstash/logstash.log


And see if the tail on the logstash log produces anything interesting?
Former Nagios employee
https://www.mcapra.com/
Locked