NXLog-ce-2.11.2190 stops sending logs after network disconnect and reconnect

Tags:

#1 Wrzek

Hello,

My NXLog-ce-2.11.2190 stops sending logs after network disconnect and reconnect.

Last logs: 2021-10-05 11:40:09 INFO nxlog-ce-2.11.2190 started 2021-10-05 11:53:29 INFO reconnecting in 1 seconds 2021-10-05 11:53:29 ERROR om_udp apr_socket_send failed; Został dostarczony nieprawidłowy argument.
2021-10-05 11:53:30 ERROR couldn't connect to udp socket on 10.2.1.159:9000; Próba przeprowadzenia operacji, wykonywanej przez gniazdo, na nieosiągalnej sieci.

Config:

<Extension _gelf> Module xm_gelf </Extension>

<Input in> Module im_msvistalog <QueryXML> <QueryList> <Query Id="0"> <Select Path="Security"></Select> <Select Path="Microsoft-Windows-UniversalTelemetryClient/Operational"></Select> </Query> </QueryList> </QueryXML> </Input>

<Output out> Module om_udp Host 10.2.1.159 Port 9000 OutputType GELF </Output>

<Route 1> Path in => out </Route>

System: Windows 10 Pro version 2004 on VMware vSphere 7.0

It is exactly the same question like here: https://www.mail-archive.com/nxlog-ce-users@lists.sourceforge.net/msg00970.html but I'm using the latest version of NXLog-CE.

Any ideas, please...?

#2 rafDeactivated Nxlog ✓
#1 Wrzek
Hello, My NXLog-ce-2.11.2190 stops sending logs after network disconnect and reconnect. Last logs: 2021-10-05 11:40:09 INFO nxlog-ce-2.11.2190 started 2021-10-05 11:53:29 INFO reconnecting in 1 seconds 2021-10-05 11:53:29 ERROR om_udp apr_socket_send failed; Został dostarczony nieprawidłowy argument. 2021-10-05 11:53:30 ERROR couldn't connect to udp socket on 10.2.1.159:9000; Próba przeprowadzenia operacji, wykonywanej przez gniazdo, na nieosiągalnej sieci. Config: <Extension _gelf> Module xm_gelf </Extension> <Input in> Module im_msvistalog <QueryXML> <QueryList> <Query Id="0"> <Select Path="Security"></Select> <Select Path="Microsoft-Windows-UniversalTelemetryClient/Operational"></Select> </Query> </QueryList> </QueryXML> </Input> <Output out> Module om_udp Host 10.2.1.159 Port 9000 OutputType GELF </Output> <Route 1> Path in => out </Route> System: Windows 10 Pro version 2004 on VMware vSphere 7.0 It is exactly the same question like here: https://www.mail-archive.com/nxlog-ce-users@lists.sourceforge.net/msg00970.html but I'm using the latest version of NXLog-CE. Any ideas, please...?

Hey,

I've just tested some simple UDP scenarios and everything went fine, which makes me suspect it might be something on the Graylog side.

Would you consider switching to TCP? It's a better choice anyway, hence, it won't hurt to check it.

Best regards,
Raf