Send same log to 2 different NLS Setup

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Send same log to 2 different NLS Setup

Post by cdienger »

I've tested with the supplied configuration and do not have the problem. There must be something unique going on with that system.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Sampath.Basireddy
Posts: 252
Joined: Wed Dec 14, 2016 12:30 pm

Re: Send same log to 2 different NLS Setup

Post by Sampath.Basireddy »

Today I was checking the logs on the new NLS, somehow I see few logs forwarded there which is very strange.

Very few logs though. Like 7 logs in last week, otherwise there were about half million logs forwarded to existing Nagios Log Server.

Sent a PM with attachment of the dashboard.

This is very strange and confusing.
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Send same log to 2 different NLS Setup

Post by cdienger »

Very odd. Instead of trying to have a single config that sends to two different servers you could run the setup script again to create a new config(for the same file) that sends to the second server.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Sampath.Basireddy
Posts: 252
Joined: Wed Dec 14, 2016 12:30 pm

Re: Send same log to 2 different NLS Setup

Post by Sampath.Basireddy »

Yep, tried that as well with both NLS IP & Host name, but no luck. :(
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: Send same log to 2 different NLS Setup

Post by cdienger »

What do the logstash filters look like on the NLS side of things? Try creating a new input(and new port) just for this log and run a tcpdump that captures trafficto the listening port - do you see traffic coming across on it? The tcpdump command would look like:

tcpdump -i any port XXX
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Locked