Nagios Support Forum

Hi

I have two nodes NLS cluster. when I'm trying to apply a filter, it always fails and saying that "configurations could not be verified". Can you help me to fix it?

Regards
Luke

Can you share what you are adding in the new filter?

Hi

Its a very basic filter.


Input:

tcp {
type => 'syslog'
port => 5544
}

Test Filters:

if [type] == "syslog" {
dns {
reverse => [ "host" ]
action => "replace"
}
mutate {
add_tag => [ "syslog" ]
}
}

OR

dns {
reverse => ["host"]
action => ["append"]
add_tag => ["dns"]
}


Regards
Luke.

Van you click Verify Configuration and send the error?

hi

Once verified;

Configuration is OK!

However, I just restarted both nodes and now the error has been changed. Please see the attached screenshots.

Br
Luke.

Can you verify crond is running on the server that says it is offline

Hi


Please find I have attached the screenshots.

Br
Luke.

Can you go to Configure -> Per Instance (Advanced) -> select instance that is failing
Click View -> All Files Combined

And send the whole thing

Thanks

Hi ,

#
# Logstash Configuration File
# Dynamically created by Nagios Log Server
#
# DO NOT EDIT THIS FILE. IT WILL BE OVERWRITTEN.
#
# Created Fri, 01 Mar 2019 06:42:12 +0800
#

#
# Global inputs
#

input {
tcp {
type => 'syslog'
port => 5544
}

udp {
type => 'syslog'
port => 514
}
}

#
# Local inputs
#



#
# Global filters
#

filter {
dns {
reverse => ["host"]
action => ["append"]
add_tag => ["dns"]
}
}

#
# Local filters
#



#
# Required output for Nagios Log Server
#

output {
elasticsearch {
hosts => ['localhost']
document_type => '%{type}'
workers => 4
}
}

#
# Global outputs
#

output {

}

#
# Local outputs
#


Thank you
Luke.

That is strange, this does not contain the filter you said you were adding earlier.

Can you post the output of the following