Detection of broken connection with syslog host

#1 nauman73 8 years ago

Hi Guys

I am using NXLog CE for sending logs to syslog host. My output definition is as follows.

<Output out_WebAdmin>
Module om_tcp
Host 10.51.4.38
Port 5544
Exec to_syslog_bsd();
</Output>

I am looking for a way to raise an alert when connection between syslog host and NXLog CE breaks for some reason. I have looked in NXLog documentation and have also tried to find a way on web but so far I have not found a way. The only thing I see is a message in the NXLog log file.

2016-02-19 19:02:34 ERROR om_tcp send failed; An existing connection was forcibly closed by the remote host.

Any ideas?

Regards
Nauman

Permalink

#2 adm Nxlog ✓ 8 years ago

#1 nauman73

Hi Guys I am using NXLog CE for sending logs to syslog host. My output definition is as follows. <Output out_WebAdmin> Module om_tcp Host 10.51.4.38 Port 5544 Exec to_syslog_bsd(); </Output> I am looking for a way to raise an alert when connection between syslog host and NXLog CE breaks for some reason. I have looked in NXLog documentation and have also tried to find a way on web but so far I have not found a way. The only thing I see is a message in the NXLog log file. 2016-02-19 19:02:34 ERROR om_tcp send failed; An existing connection was forcibly closed by the remote host. Any ideas? Regards Nauman

You can use im_internal and check $Message there and raise an alert. The other option is to use im_file on nxlog.log.