Sidecar nxlog configuration failing

Graylog Central (peer support)
1

I can’t get sidecar nxlog configuration to work on my new installation.

I’m using:

  • Graylog v2.4.6+ceaa7e4
  • Sidecar 0.1.7-1
  • NxLog 2.10.2150

I have run the command to uninstall the NXLog service as per documentation.

My sidecar config specifies NxLog like this:

backends:
- name: nxlog
enabled: true
binary_path: C:\Program Files (x86)\nxlog\nxlog.exe
configuration_path: C:\Program Files\graylog\collector-sidecar\generated\nxlog.conf

When Sidecar starts it complaints some:

time=“2018-12-18T15:12:54+01:00” level=info msg=“Stopping signal distributor”
time=“2018-12-18T15:12:54+01:00” level=info msg="[filebeat] Stopping"
time=“2018-12-18T15:12:54+01:00” level=info msg="[nxlog] Stopping"
time=“2018-12-18T15:12:57+01:00” level=info msg=“Starting signal distributor”
time=“2018-12-18T15:12:57+01:00” level=info msg="[nxlog] Stopping"
time=“2018-12-18T15:12:57+01:00” level=info msg="[filebeat] Starting (exec driver)"
time=“2018-12-18T15:12:57+01:00” level=error msg="[nxlog] Could not send stop control: The service has not been started."
time=“2018-12-18T15:12:57+01:00” level=info msg="[nxlog] Starting (svc driver)"
time=“2018-12-18T15:13:07+01:00” level=info msg="[filebeat] Configuration change detected, rewriting configuration file."
time=“2018-12-18T15:13:07+01:00” level=info msg="[filebeat] Stopping"
time=“2018-12-18T15:13:10+01:00” level=info msg="[filebeat] Starting (exec driver)"

Maybe ok? I dont know but no nxlog.conf appear in the generated folder. So the NxLog wrapper service point to a non existing conf file…

I cant figure out why the nxlog.conf doen’t get generated.
Googling away haven’t brought me nearer to any explanation.

hope someone can help me here (again) thanks.

Best regards, Peter

2

Ok I might have mixed up some between my test environments.

It seems like the problem was a missing tag in the sidecar config on the log client server.

I think it’s behaving better now:-)

3

This very often is the cause of “problems that aren’t problems” with the Sidecar. Nice catch on finding it :slight_smile:

4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.