Hi,

I am trying to add a custom tag message in front of the logs similar to rsyslog custom tagging, but couldn't find a module on tagging logs. The solution in te previous forum on tagging didn't work out.

https://nxlog.co/question/4006/nxlog-logstash-using-custom-tags

Solution in that forum : Exec $tag = 'hl7out';

Does custom tagging works for AIX ? Please provide a solution for it to reflect it in forwarded logs.

I'm using nxlog-ce-2.10.5 on AIX 6.5. Configure and make with default options. After building successfully, I tried to start nxlog with im_file and om_file, like the following: ``` Module im_file File "/home/logtest/*.log" Module om_file File "/home/logtest/1.out" Path messages => tcp ``` But nxlog shows some error like this: ``` 2018-07-16 08:45:16 ERROR Failed to load module from /usr/local/libexec/nxlog/modules/input/im_file.so, rtld: 0712-001 Symbol nx_assertion_failed was referenced; from module /usr/local/libexec/nxlog/modules/input/im_file.so(), but a runtime definition; of the symbol was not found.;rtld: 0712-001 Symbol nx_module_add_logdata_input was referenced; from module /usr/local/libexec/nxlog/modules/input/im_file.so(), but a runtime definition; of the symbol was not found.;rtld: 0712-001 Symbol nx_log was referenced; from module /usr/local/libexec/nxlog/modules/input/im_file.so(), but a runtim;DSO load failed 2018-07-16 08:45:16 ERROR Failed to load module from /usr/local/libexec/nxlog/modules/output/om_file.so, rtld: 0712-001 Symbol nx_assertion_failed was referenced; from module /usr/local/libexec/nxlog/modules/output/om_file.so(), but a runtime definition; of the symbol was not found.;rtld: 0712-001 Symbol nx_log was referenced; from module /usr/local/libexec/nxlog/modules/output/om_file.so(), but a runtime definition; of the symbol was not found.;rtld: 0712-001 Symbol nx_pool_create_child was referenced; from module /usr/local/libexec/nxlog/modules/output/om_file.so(), but a runtime de;DSO load failed 2018-07-16 08:45:16 WARNING no functional input modules! 2018-07-16 08:45:16 ERROR module 'messages' is not declared at nxlog.conf:12 2018-07-16 08:45:16 ERROR module 'tcp' is not declared at nxlog.conf:12 2018-07-16 08:45:16 ERROR route messages_to_tcp is not functional without input modules, ignored at nxlog.conf:12 2018-07-16 08:45:16 WARNING no routes defined! 2018-07-16 08:45:16 INFO nxlog-ce-2.10.5 started ``` What did I miss?

config file:

## This is a sample configuration file. See the nxlog reference manual about the

## configuration options. It should be installed locally under

## /usr/share/doc/nxlog-ce/ and is also available online at

## http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html

########################################

# Global directives                    #

########################################

User nxlog

Group nxlog

LogFile /var/log/nxlog/nxlog.log

LogLevel INFO

########################################

# Modules                              #

########################################

<Extension _syslog>

    Module      xm_syslog

</Extension>

<Extension multiline>

 Module xm_multiline

 HeaderLine /^\w{3}\s\w{3}\s\d{2}\s\d{2}:\d{2}:\d{2}\s\d{4}/

</Extension>

<Input oerrorin1>

 Module    im_file

 File     '/u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log'

 InputType multiline

 SavePos TRUE

 ReadFromLast  FALSE

</Input>

<Output udpout>

 Module    om_udp

 Host   10.1.227.45

 Port   514

</Output>s

########################################

# Routes                               #

########################################

<Route 1>

    Path        oerrorin1 =>udpout

</Route>

 

then i get the log:

2017-03-17 16:16:39 INFO nxlog-ce-2.8.1248 started

2017-03-17 16:16:39 ERROR failed to open /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:16:41 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:16:47 ERROR last message repeated 2 times

2017-03-17 16:16:55 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:17:11 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:17:43 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:18:47 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:20:55 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:25:11 ERROR apr_stat failed on file /u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log;Permission denied

2017-03-17 16:34:16 DEBUG reading config cache from /var/spool/nxlog/configcache.dat

2017-03-17 16:34:16 DEBUG Setting up module '_syslog' using xm_syslog

2017-03-17 16:34:16 DEBUG module _syslog has 4 exported functions

2017-03-17 16:34:16 DEBUG registering function syslog_facility_value

2017-03-17 16:34:16 DEBUG function 'syslog_facility_value' registered

2017-03-17 16:34:16 DEBUG registering function syslog_facility_string

2017-03-17 16:34:16 DEBUG function 'syslog_facility_string' registered

2017-03-17 16:34:16 DEBUG registering function syslog_severity_value

2017-03-17 16:34:16 DEBUG function 'syslog_severity_value' registered

2017-03-17 16:34:16 DEBUG registering function syslog_severity_string

2017-03-17 16:34:16 DEBUG function 'syslog_severity_string' registered

2017-03-17 16:34:16 DEBUG module _syslog has 9 exported procedures

2017-03-17 16:34:16 DEBUG registering procedure parse_syslog

2017-03-17 16:34:16 DEBUG procedure 'parse_syslog' registered

2017-03-17 16:34:16 DEBUG registering procedure parse_syslog

2017-03-17 16:34:16 DEBUG procedure 'parse_syslog' registered

2017-03-17 16:34:16 DEBUG registering procedure parse_syslog_bsd

2017-03-17 16:34:16 DEBUG procedure 'parse_syslog_bsd' registered

2017-03-17 16:34:16 DEBUG registering procedure parse_syslog_bsd

2017-03-17 16:34:16 DEBUG procedure 'parse_syslog_bsd' registered

2017-03-17 16:34:16 DEBUG registering procedure parse_syslog_ietf

2017-03-17 16:34:16 DEBUG procedure 'parse_syslog_ietf' registered

2017-03-17 16:34:16 DEBUG registering procedure parse_syslog_ietf

2017-03-17 16:34:16 DEBUG procedure 'parse_syslog_ietf' registered

2017-03-17 16:34:16 DEBUG registering procedure to_syslog_bsd

2017-03-17 16:34:16 DEBUG procedure 'to_syslog_bsd' registered

2017-03-17 16:34:16 DEBUG registering procedure to_syslog_ietf

2017-03-17 16:34:16 DEBUG procedure 'to_syslog_ietf' registered

2017-03-17 16:34:16 DEBUG registering procedure to_syslog_snare

2017-03-17 16:34:16 DEBUG procedure 'to_syslog_snare' registered

2017-03-17 16:34:16 DEBUG Setting up module 'multiline' using xm_multiline

2017-03-17 16:34:16 DEBUG Setting up module 'oerrorin1' using im_file

2017-03-17 16:34:16 DEBUG module oerrorin1 has 1 exported functions

2017-03-17 16:34:16 DEBUG registering function file_name

2017-03-17 16:34:16 DEBUG function 'file_name' registered

2017-03-17 16:34:16 DEBUG module oerrorin1 has 0 exported procedures

2017-03-17 16:34:16 DEBUG FlowControl enabled for oerrorin1

2017-03-17 16:34:16 DEBUG Setting up module 'udpout' using om_udp

2017-03-17 16:34:16 DEBUG Setting up module 'fileout2' using om_file

2017-03-17 16:34:16 DEBUG module fileout2 has 2 exported functions

2017-03-17 16:34:16 DEBUG registering function file_name

2017-03-17 16:34:16 DEBUG function 'file_name' registered

2017-03-17 16:34:16 DEBUG registering function file_size

2017-03-17 16:34:16 DEBUG function 'file_size' registered

2017-03-17 16:34:16 DEBUG module fileout2 has 2 exported procedures

2017-03-17 16:34:16 DEBUG registering procedure rotate_to

2017-03-17 16:34:16 DEBUG procedure 'rotate_to' registered

2017-03-17 16:34:16 DEBUG registering procedure reopen

2017-03-17 16:34:16 DEBUG procedure 'reopen' registered

2017-03-17 16:34:16 DEBUG CONFIG: _syslog

2017-03-17 16:34:16 DEBUG inputreader 'Syslog_TLS' registered

2017-03-17 16:34:16 DEBUG Inputreader 'Syslog_TLS' registered

2017-03-17 16:34:16 DEBUG outputwriter 'Syslog_TLS' registered

2017-03-17 16:34:16 DEBUG Outputwriter 'Syslog_TLS' registered

2017-03-17 16:34:16 DEBUG CONFIG: multiline

2017-03-17 16:34:16 DEBUG inputreader 'multiline' registered

2017-03-17 16:34:16 DEBUG Inputreader 'multiline' registered

2017-03-17 16:34:16 DEBUG CONFIG: oerrorin1

2017-03-17 16:34:16 DEBUG adding string [/u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log]

2017-03-17 16:34:16 DEBUG string literal declared at line 29, character 86 in /etc/nxlog.conf

2017-03-17 16:34:16 DEBUG literal

2017-03-17 16:34:16 DEBUG parsed expression

2017-03-17 16:34:16 DEBUG CONFIG: udpout

2017-03-17 16:34:16 DEBUG CONFIG: fileout2

2017-03-17 16:34:16 DEBUG adding string [/var/log/logmsg2.txt]

2017-03-17 16:34:16 DEBUG string literal declared at line 43, character 27 in /etc/nxlog.conf

2017-03-17 16:34:16 DEBUG literal

2017-03-17 16:34:16 DEBUG parsed expression

2017-03-17 16:34:16 DEBUG pidfile /var/run/nxlog/nxlog.pid removed

2017-03-17 16:34:16 DEBUG daemonizing...

2017-03-17 16:34:16 DEBUG INIT: _syslog

2017-03-17 16:34:16 DEBUG INIT: multiline

2017-03-17 16:34:16 DEBUG INIT: oerrorin1

2017-03-17 16:34:16 DEBUG INIT: udpout

2017-03-17 16:34:16 DEBUG Pollset initialized for module udpout (method: poll)

2017-03-17 16:34:16 DEBUG INIT: fileout2

2017-03-17 16:34:16 DEBUG Pollset initialized for module fileout2 (method: poll)

2017-03-17 16:34:16 DEBUG now running as group nxlog

2017-03-17 16:34:16 WARNING additional group memberships couldn't be set because getgrouplist()and setgroups() are not available on this platform

2017-03-17 16:34:16 DEBUG now running as user nxlog

2017-03-17 16:34:16 DEBUG running as uid: 203, euid: 203, gid: 204, egid: 204

2017-03-17 16:34:16 DEBUG pidfile /var/run/nxlog/nxlog.pid created

2017-03-17 16:34:16 DEBUG parsing path: oerrorin1 =>udpout

2017-03-17 16:34:16 DEBUG adding module oerrorin1 to route 1

2017-03-17 16:34:16 DEBUG adding module udpout to route 1

2017-03-17 16:34:16 DEBUG parsing path: in2 => fileout2

2017-03-17 16:34:16 ERROR [router.c:68/nx_route_add_module()] module 'in2' is not declared at /etc/nxlog.conf:54

2017-03-17 16:34:16 DEBUG adding module fileout2 to route tcproute

2017-03-17 16:34:16 ERROR [router.c:347/nx_add_route()] route tcproute is not functional without input modules, ignored at /etc/nxlog.conf:54

2017-03-17 16:34:16 DEBUG jobgroup created with priority 99

2017-03-17 16:34:16 DEBUG jobgroup created with priority 10

2017-03-17 16:34:16 DEBUG spawning 3 worker threads

2017-03-17 16:34:16 DEBUG worker thread 0 started

2017-03-17 16:34:16 DEBUG worker thread 1 started

2017-03-17 16:34:16 DEBUG worker thread 2 started

 

I have no idea about this problem. 

 

/u01/app/oracle/diag/rdbms/oraywsoudb/oraywsoudb/trace/alert_oraywsoudb.log   --> user and group is oracle:oinstall

and i add the nxlog user in oinstall group， but why continue report Permission denied?

 

Hello There,

Please help me to get answers of below questions.

1. What all logs can be captured using NXLog client on Windows, Unix, AIX and Linux platforms?

2. What is the system prerequsites for installing NXLog client on Windows, UNIX, AIX and Linux platforms?

Thank you.

 

I've seen the blog posting for AIX support following the download source and compile route.

Is a binary distribution of AIX in the roadmap to anyone's knowledge?

Thanks,

 

Rob

Hello,

I would like to obtain information in alert.log multiple lines for an event but without success. Below, my configuration :

<Extension multiline>

        Module       xm_multiline

        HeaderLine   /^\w\w\w\s\w\w\w\s\d\d\s\d\d:\d\d:\d\d\s\d\d\d\d/

</Extension>

<Extension syslog>

        Module  xm_syslog

</Extension>

<Input aix_syslog>

        Module  im_file

        File "/var/log/syslog.out*"

        Exec        to_syslog_bsd();

</Input>

<Input oracle_log_DBA102XX>

        Module      im_file

        InputType   multiline

        File        "/oradata/DBA102XX/admin/trace/bdump/alert_DBA102XX.log"

        Exec        to_syslog_bsd();

        Exec        $SourceName = "DBA102XX";

</Input>

<Output fluent_aix>

        Module om_udp

        Host 172.31.12.104

        Port 5139

</Output>

<Output fluent_oracle>

        Module om_udp

        Host 172.31.12.104

        Port 5127

</Output>

########################################

# Routes                               #

########################################

<Route 1>

        Path    aix_syslog => fluent_aix

</Route>

<Route 2>

    Path        oracle_log_DBA102XX => fluent_oracle

</Route>

Result Fluentd side :

7 Jun 2016 23:21:21     oracle.user.notice      {"host":"xmgpoc01","ident":"Tue","message":"21:21 DFT 2016"}

7 Jun 2016 23:21:21     oracle.user.notice      {"host":"xmgpoc01","ident":"Thread","message":"1 advanced to log sequence 66 (LGWR switch)"}

7 Jun 2016 23:21:21     oracle.user.notice      {"host":"xmgpoc01","ident":"","message":"/oradata/DBA102XX/oraredo01/LOG3A_DBA102XX.ORA"}

7 Jun 2016 23:21:21     oracle.user.notice      {"host":"xmgpoc01","ident":"","message":"/oradata/DBA102XX/oraredo02/LOG3B_DBA102XX.ORA"}

This line "Exec        $SourceName = "DBA102XX";" doesn't works, i dont know why.

Thank you for your help.

 

 

Hello, is there any guideline for install the community edition in AIX?

Trying to run nxlog-ce 2.8.1248 on AIX 7.1.

Compilation is succesful, nxlog binnary is created, but can not run. There are messages like:

"ERROR Failed to load module from /usr/local/libexec/nxlog/modules/extension/xm_syslog.so, Could not load module /usr/local/libexec/nxlog/modules/extension/xm_syslog.so.; System error: No such file or directory;DSO load file"

There are static libraries (.a) in directories but dynamic (.so) not.