Log are not in the order

Tags:

#1 mcoussi

Hi,

I use NXLog to send log of an Oracle Database to Graylog.

When i send the log to a INPUT in Graylog, the logs in Graylog are not in the same order as the source logfile.

I have configured an output to send event in an other logfile and in the new log the event are ine the same order as the source logfile.

Configuration to the UDP Output Graylog where the event are not in the same order as the source logfile.

<Extension gelf>
    Module        xm_gelf
    ShortMessageLength 200
</Extension>

<Input ora-database-rman>
    Module          im_file
    File            "/oracle/rman/logs/DATABASE_*.log"
</Input>

<Output ext-graylog>
        Module om_udp
        Host XX.XX.XX.XX
        Port XXXXX
    OutputType    GELF_UDP
</Output>

<Route database-rman
    Path            ora-database-rman => ext-graylog
</Route>

Configuration to the om_file module loca where the event are in the same order as the source logfile.

<Input ora-database-rman>
    Module          im_file
    File            "/oracle/rman/logs/DATABASE_*.log"
        Exec sleep(100);
</Input>

<Output fileout>
    File            'tmp/output'
    Module          om_file
</Output>

<Route database-rman
    Path            ora-database-rman => fileout
</Route>

Do you have an idea how to get the event in the order to the OUTPUT TCP ?

Thanks for your help,

Matt

#2 jeffron Nxlog ✓ (Last updated )
#1 mcoussi
Hi, I use NXLog to send log of an Oracle Database to Graylog. When i send the log to a INPUT in Graylog, the logs in Graylog are not in the same order as the source logfile. I have configured an output to send event in an other logfile and in the new log the event are ine the same order as the source logfile. Configuration to the UDP Output Graylog where the event are not in the same order as the source logfile. <Extension gelf> Module xm_gelf ShortMessageLength 200 </Extension> <Input ora-database-rman> Module im_file File "/oracle/rman/logs/DATABASE_*.log" </Input> <Output ext-graylog> Module om_udp Host XX.XX.XX.XX Port XXXXX OutputType GELF_UDP </Output> <Route database-rman Path ora-database-rman => ext-graylog </Route> Configuration to the om_file module loca where the event are in the same order as the source logfile. <Input ora-database-rman> Module im_file File "/oracle/rman/logs/DATABASE_*.log" Exec sleep(100); </Input> <Output fileout> File 'tmp/output' Module om_file </Output> <Route database-rman Path ora-database-rman => fileout </Route> Do you have an idea how to get the event in the order to the OUTPUT TCP ? Thanks for your help, Matt

Hi Matthieu,

Can share the NXLog agent version and the Graylog version where you experienced this issue? Would you mind if I ask if you experience this issue when you use the OutputType GELF_TCP

Br,

Jeffron