Not able to add New Source to Nagios Log server

[anish]

There is no PID

[root@SESKLNGLSIPD02 ~]# netstat -nap | grep 5544
tcp 0 0 ::1:5544 ::1:55828 TIME _WAIT -

[eloyd]

Is after having stopped logstash?

[anish]

Yes

[eloyd]

So you have nothing else listening on port 5544. That's good. But that's also bad because it means something is wrong with NLS or firewall.

I want to go back to this:

Code: Select all

[root@SESKLNGLSIPD01 /]# iptables -L -v -n | grep 5544
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:5544
0 0 ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:5544

That tells me that zero packets have been received by your system. Is it possible that there is an external, network-level firewall that is preventing things from reaching you? Or perhaps an earlier firewall rule that is incorrect and causing traffic to be rejected?

[tmcdonald]

Thanks for the assist, @eloyd!

[eloyd]

No, it's a TIME_WAIT state, which is the NLS server process exiting and leaving the port in that state. If something were using it, you'd see a LISTENING State.

[cdienger]

Good point. Anish, you want to go ahead and generate a profile under Administration > System > System Status and attach it to an email to [email protected], we can start a ticket and take a closer look.

[anish]

Thank you ,

I have sent the email with the attached system status

[cdienger]

No problem. I've taken the case and will have a look now.

[anish]

can we work on the issue today . I have sent an email with the contact details as well .