ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid

Graylog Central (peer support)
1

Hello Guys,

I been having this error error using the nxlog collector:

2017-10-11 22:47:22 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:27 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:32 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:37 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:39 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:44 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:49 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory
2017-10-11 22:47:54 ERROR couldn't open pidfile /var/run/nxlog/nxlog.pid;No such file or directory

I usually fix it by

mkdir /var/run/nxlog
chown nxlog:nxlog /var/run/nxlog
systemctl restart collector-sidecar

but normally it happens again after a while or a server restart.

2

Are you sure that NXLOG is running with the “nxlog” system user and not some other user?
Usually it’s being spawned by the user which is running the Graylog Collector Sidecar.

You should probably investigate why the permissions change after a restart.

3

nice man I will take a look, I just wanted to check if someone have run into the same, cause I installed the same way on all the servers and it is randomly happening in some of them.