Page 1 of 2
Do we have any cap for log Sources?
Posted: Thu Nov 17, 2016 4:08 pm
by srinivasmandalika
I am trying add log sources to the nagios log server, but no matter how many log sources I add, I can see only 11...
Can someone help me to add more log sources please?
Thanks!
Srinivas Mandalika
Re: Do we have any cap for log Sources?
Posted: Thu Nov 17, 2016 4:19 pm
by mcapra
There is no cap on sources for the free version; Only on total traffic.
The "Receiving logs from X hosts" message can be inaccurate at times. Are the sources you are adding actively sending logs? Do you see those logs in the dashboard when you search for the IP address or hostname of the source you added?
Re: Do we have any cap for log Sources?
Posted: Thu Nov 17, 2016 4:28 pm
by srinivasmandalika
We have bought a license for single instance and this is not a free version...
So, going by that, we don't have a cap... right? Then, why could not I see any more log sources?
Srinivas Mandalika
Re: Do we have any cap for log Sources?
Posted: Thu Nov 17, 2016 4:33 pm
by mcapra
Ah, there is no sources cap at any rate. I would recommend contacting our sales department and having them whitelist your forum account for the "Customer Support" section if you haven't done so yet
Then, why could not I see any more log sources?
I would start by examining the inputs you have configured for your Nagios Log Server machine (acquired via
grep '' /usr/local/nagioslogserver/logstash/etc/conf.d/*) and the rsyslog/nxlog inputs on the machines you are not receiving logs from. Can you provide those things for me to look at?
Re: Do we have any cap for log Sources?
Posted: Thu Nov 17, 2016 4:48 pm
by srinivasmandalika
I added the output file and added one of the machine's conf and log file... I cannot add more as this says "Cannot add another attachment, 3 is the maximum." ...
Re: Do we have any cap for log Sources?
Posted: Thu Nov 17, 2016 5:01 pm
by dwhitfield
@srinivasmandalika, feel free to PM me the additional logs. Alternatively, you could just post them in a separate post. You could zip them all up and post the zip, if you like.
If you do PM me the additional logs, please update this forum thread so that the thread will pop back up on our dashboard.
UPDATE: logs received and shared with techs
Re: Do we have any cap for log Sources?
Posted: Fri Nov 18, 2016 9:26 am
by srinivasmandalika
I just sent the personal message...
Srinivas Mandalika
Re: Do we have any cap for log Sources?
Posted: Fri Nov 18, 2016 2:11 pm
by mcapra
All of your configurations look good. Can you share the contents of the following files:
Code: Select all
/var/log/logstash/logstash.log
/var/log/elasticsearch/4aa88b36-6e32-4c15-992e-78e1784d646c.log
If you are using the latest version of Nagios Log Server (1.4.4), can you also post a system profile? You can gather a profile via Administration->System Status->Download System Profile.
Re: Do we have any cap for log Sources?
Posted: Fri Nov 18, 2016 2:34 pm
by srinivasmandalika
Please find the required files as attached...
Srinivas Mandalika
Re: Do we have any cap for log Sources?
Posted: Fri Nov 18, 2016 2:41 pm
by mcapra
Can you share the output of:
Code: Select all
service logstash restart
tail -f /var/log/logstash/logstash.log
And see if the tail on the logstash log produces anything interesting?