Page 1 of 3

Remove Client

Posted: Wed Feb 17, 2016 2:18 am
by rlinux57
Kindly let me know how to remove client or stop client to send logs to NLS ?

Re: Remove Client

Posted: Wed Feb 17, 2016 10:37 am
by hsmith
What kind of device is it sending logs?

Re: Remove Client

Posted: Wed Feb 17, 2016 1:31 pm
by rlinux57
Linux based client.

Re: Remove Client

Posted: Wed Feb 17, 2016 1:40 pm
by hsmith
You could stop the rsyslog daemon, but that might be a little extreme. You could remove the directive that is telling it to send to your NLS server from the configuration and restart rsyslog.

Re: Remove Client

Posted: Wed Feb 17, 2016 1:46 pm
by rlinux57
Can you be more specific ?

Re: Remove Client

Posted: Wed Feb 17, 2016 1:52 pm
by rkennedy
Look in your /etc/rsyslog.d/ directory, and remove the file that is associated with NLS. For instance, mine is /etc/rsyslog.d/99-nagioslogserver.conf.

Once it's removed, run service rsyslog restart

Re: Remove Client

Posted: Thu Feb 18, 2016 8:06 am
by rlinux57
I'm getting issue while fetching logs from client end, i have not receiving logs from client and i have allowed port "5544" in csf firewall on client end.

Re: Remove Client

Posted: Thu Feb 18, 2016 11:14 am
by rkennedy
Can you please clarify the issue you're talking about? I thought you wanted to remove the client.

Re: Remove Client

Posted: Thu Feb 18, 2016 4:41 pm
by rlinux57
I have removed the client and add another client that's using CSF firewall i have allowed port number but NLS won't fetch logs..

Re: Remove Client

Posted: Thu Feb 18, 2016 4:47 pm
by hsmith
Something to understand is that NLS doesn't 'fetch' logs. The client sends the logs to NLS, and NLS processes them accordingly. What kind of syslog daemon is your new client running?