[NXLOG-CE-3.0.2284] Error 109 - Broken Pipe
Hi,
I installed recently the last version of NXLOG-CE (3.0.2284) on my windows server 2016 Standard. I noticed that the configcache is not functionnal in my case because of an erreor when nxlog service stop => "System Error 109 has occurred. The pipe has ended" My configcache.dat file is not updated and when I restart the service, a lot of old logs are sended to my logstash
Here's my nxlog conf file
Panic Soft
define ROOT C:\nxlog define CERTDIR %ROOT%\cert
define CONFDIR %ROOT%\conf define LOGDIR %ROOT%\data
define LOGFILE %LOGDIR%\nxlog.log LogFile %LOGFILE% LogLevel INFO
Moduledir %ROOT%\Modules Pidfile %ROOT%\nxlog.pid SpoolDir %ROOT%\SpoolDir CacheDir %ROOT%\CacheDir
<Extension _syslog> Module xm_gelf </Extension>
<Extension json> Module xm_json </Extension>
<Extension _charconv> Module xm_charconv AutodetectCharsets iso8859-2, utf-8, utf-16, utf-32 </Extension>
<Extension _exec> Module xm_exec </Extension>
<Extension _fileop> Module xm_fileop
# Check the size of our log file hourly, rotate if larger than 5MB
<Schedule>
Every 1 hour
Exec if (file_exists('%LOGFILE%') and \
(file_size('%LOGFILE%') >= 5M)) \
file_cycle('%LOGFILE%', 8);
</Schedule>
# Rotate our log file every week on Sunday at midnight
<Schedule>
When @weekly
Exec if file_exists('%LOGFILE%') file_cycle('%LOGFILE%', 8);
</Schedule>
</Extension>
Collecting event log
<Input eventlog> Module im_msvistalog ReadFromLast TRUE SavePos TRUE Exec to_json(); </Input>
<Output ssl> Module om_ssl Host XX.XX.XX.XX CertFile %CERTDIR%\MyCertFile.crt Port XXXX AllowUntrusted TRUE </Output>
<Route 1> Path eventlog => ssl </Route>
Thank's a lot for your help
Hello Sir,
Please can you share nxlog.log file?
Another helpful info is to change LogLevel INFO to LogLevel DEBUG and upload the logs so we can have more data.
Please note to remove sensitive data since this will be publicly.
Sincerely Klevin