I am currently setting up my first installation of Graylog. I setup Graylog-collector-sidecar on a windows machine as most of the machines I will need to monitor are windows machines. I installed and started the service and when I click the executable on the windows machine I get the following:
I tried listening on port 5044 and on port 9000. I believe I configured the tags correctly. I put WSUS in the tags in the yml file and on the web browser portion of graylog I updated the tags for the configuration with both “windows” and “wsus” but I also get a similar message in the web browser when I look at the collectors.
I am getting “Status: No configuration found for configured tags!” under the sidecar info and under Backends I am getting “Winlogbeat: unable to start collector after 3 tries, giving up!”
So it looks like the machines are communicating but something is wrong with the tags.
I am running graylog version 2.4.6 and sidecar version 0.1.6.
Any help is greatly appreciated. I am happy to supply any additional information for troubleshooting.