Sidecar nxlog configuration failing

(Peter Meldgaard) #1

I can’t get sidecar nxlog configuration to work on my new installation.

I’m using:

  • Graylog v2.4.6+ceaa7e4
  • Sidecar 0.1.7-1
  • NxLog 2.10.2150

I have run the command to uninstall the NXLog service as per documentation.

My sidecar config specifies NxLog like this:

- name: nxlog
enabled: true
binary_path: C:\Program Files (x86)\nxlog\nxlog.exe
configuration_path: C:\Program Files\graylog\collector-sidecar\generated\nxlog.conf

When Sidecar starts it complaints some:

time=“2018-12-18T15:12:54+01:00” level=info msg=“Stopping signal distributor”
time=“2018-12-18T15:12:54+01:00” level=info msg="[filebeat] Stopping"
time=“2018-12-18T15:12:54+01:00” level=info msg="[nxlog] Stopping"
time=“2018-12-18T15:12:57+01:00” level=info msg=“Starting signal distributor”
time=“2018-12-18T15:12:57+01:00” level=info msg="[nxlog] Stopping"
time=“2018-12-18T15:12:57+01:00” level=info msg="[filebeat] Starting (exec driver)"
time=“2018-12-18T15:12:57+01:00” level=error msg="[nxlog] Could not send stop control: The service has not been started."
time=“2018-12-18T15:12:57+01:00” level=info msg="[nxlog] Starting (svc driver)"
time=“2018-12-18T15:13:07+01:00” level=info msg="[filebeat] Configuration change detected, rewriting configuration file."
time=“2018-12-18T15:13:07+01:00” level=info msg="[filebeat] Stopping"
time=“2018-12-18T15:13:10+01:00” level=info msg="[filebeat] Starting (exec driver)"

Maybe ok? I dont know but no nxlog.conf appear in the generated folder. So the NxLog wrapper service point to a non existing conf file…

I cant figure out why the nxlog.conf doen’t get generated.
Googling away haven’t brought me nearer to any explanation.

hope someone can help me here (again) thanks.

Best regards, Peter

(Peter Meldgaard) #2

Ok I might have mixed up some between my test environments.

It seems like the problem was a missing tag in the sidecar config on the log client server.

I think it’s behaving better now:-)

(Tess) #3

This very often is the cause of “problems that aren’t problems” with the Sidecar. Nice catch on finding it :slight_smile:

(system) closed #4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.