Page 1 of 1

New install. Mikrotik CCR1036 Sending logs to NLS

Posted: Wed Sep 26, 2018 10:19 am
by letthiswork1
Hi Guys,

I just deployed a fresh Natios Log server running CentOS 7.

All seems ok but when i try and add a Network Device and verify incoming logs it says not logs are received.

The Router + Server are on the same network and i can see syslog traffic going to the destination IP of the log server.
Its also a log of data, running around 1mbps per second.

The Router and Server can ping each other as well.

Are there any firewalls enabled on the log server by default that might be blocking the traffic?

Syslog is usually fairly straight forward and i have tried rebooting the NLS just in case.

I am running NLS 2.0.5 and Centos 7.5.1804

Re: New install. Mikrotik CCR1036 Sending logs to NLS

Posted: Wed Sep 26, 2018 4:47 pm
by npolovenko
Hello, @letthiswork1. Let's make sure that the logstash service is running. Please run the following command:
service logstash status
Then click on the Configure menu and open the Global Config in the left column. Make sure that you have an active input rule with the right type and the right port in the inputs column.

Finally, run the following command on the logserver to check for the Firewall rules:
iptables -L