Page 1 of 1

Log Server not showing syslogs

Posted: Wed Feb 17, 2016 5:48 pm
by b3l33
Hello,

I am evaluating Log Server. I have followed the basic instructions for full manual install on CentOS7 and run the Linux script on an Ubuntu 14.04 desktop to send syslogs to the server on port.

I don't see any of the Ubuntu's logs showing up in the Log Server Dashboard.

I have done basic testing using

logger -p local7.notice "XX10XX"

on the Ubunutu machine. I can see these tracing in /var/log/syslog. I can also see that each entry corresponds with a hit to the listener port on the server with tcpdump.

Can someone please help me trouble shoot?

Thank you.

--Ben

Re: Log Server not showing syslogs

Posted: Wed Feb 17, 2016 5:54 pm
by hsmith
A few questions:

What port are the logs sending to?
Is said port open in the firewall on the NLS machine?

What are the outputs of the following commands?

Code: Select all

systemctl status logstash elasticsearch firewalld
tail -n25 /var/log/elasticsearch/*.log
tail -n25 /var/log/messages
free -m
top | head -n5

Re: Log Server not showing syslogs

Posted: Wed Feb 17, 2016 5:55 pm
by b3l33
Thank you for your fast reply.

I was confused. I can see that the logs are there. I just needed to learn how to filter my view correctly.

Re: Log Server not showing syslogs

Posted: Wed Feb 17, 2016 6:24 pm
by Box293
Does this article provide you with the information you are after?

https://support.nagios.com/kb/article.php?id=297