No data in Graylog

Tags:

#1 ZE_043114

Hi. I'm new to both Graylog and NxLog. I am getting the following errors when trying to add inputs.

2020-10-14 11:48:27 WARNING stopping nxlog service 2020-10-14 11:48:27 WARNING nxlog-ce received a termination request signal, exiting... 2020-10-14 11:48:28 ERROR invalid keyword: Output at C:\Program Files (x86)\nxlog\conf\nxlog.conf:66 2020-10-14 11:48:28 ERROR module 'graylog' has configuration errors, not adding to route 'graylog_route' at C:\Program Files (x86)\nxlog\conf\nxlog.conf:70 2020-10-14 11:48:28 ERROR route graylog_route is not functional without output modules, ignored at C:\Program Files (x86)\nxlog\conf\nxlog.conf:70 2020-10-14 11:48:28 WARNING no routes defined! 2020-10-14 11:48:28 WARNING not starting unused module win 2020-10-14 11:48:28 WARNING not starting unused module graylog 2020-10-14 11:48:28 INFO nxlog-ce-2.10.2150 started

I added the following lines to my config file

<Extension _gelf> Module xm_gelf </Extension>

<Input win> Module im_msvistalog Query <QueryList>
<Query Id="0">
<Select Path="Application"></Select>
<Select Path="System">
</Select>
<Select Path="Security">*</Select>
</Query>
</QueryList> </Input>

<Output graylog> Module om_udp host 172.16.101.33 Port 12201 Output Type GELF </Output>

<Route graylog_route> Path win => graylog </Route>

Any help is appreciated.

#2 rafDeactivated Nxlog ✓
#1 ZE_043114
Hi. I'm new to both Graylog and NxLog. I am getting the following errors when trying to add inputs. 2020-10-14 11:48:27 WARNING stopping nxlog service 2020-10-14 11:48:27 WARNING nxlog-ce received a termination request signal, exiting... 2020-10-14 11:48:28 ERROR invalid keyword: Output at C:\Program Files (x86)\nxlog\conf\nxlog.conf:66 2020-10-14 11:48:28 ERROR module 'graylog' has configuration errors, not adding to route 'graylog_route' at C:\Program Files (x86)\nxlog\conf\nxlog.conf:70 2020-10-14 11:48:28 ERROR route graylog_route is not functional without output modules, ignored at C:\Program Files (x86)\nxlog\conf\nxlog.conf:70 2020-10-14 11:48:28 WARNING no routes defined! 2020-10-14 11:48:28 WARNING not starting unused module win 2020-10-14 11:48:28 WARNING not starting unused module graylog 2020-10-14 11:48:28 INFO nxlog-ce-2.10.2150 started I added the following lines to my config file <Extension _gelf> Module xm_gelf </Extension> <Input win> Module im_msvistalog Query <QueryList> <Query Id="0"> <Select Path="Application"></Select> <Select Path="System"></Select> <Select Path="Security">*</Select> </Query> </QueryList> </Input> <Output graylog> Module om_udp host 172.16.101.33 Port 12201 Output Type GELF </Output> <Route graylog_route> Path win => graylog </Route> Any help is appreciated.

Hi,

You might want to correct your "typos", as there's no Output Type, but OutputType.

Also, make sure your Graylog instance accepts UDP on given port.

Regards,

Rafal