2
responses

Hi. I'm new to both Graylog and NxLog. I am getting the following errors when trying to add inputs.

2020-10-14 11:48:27 WARNING stopping nxlog service
2020-10-14 11:48:27 WARNING nxlog-ce received a termination request signal, exiting...
2020-10-14 11:48:28 ERROR invalid keyword: Output at C:\Program Files (x86)\nxlog\conf\nxlog.conf:66
2020-10-14 11:48:28 ERROR module 'graylog' has configuration errors, not adding to route 'graylog_route' at C:\Program Files (x86)\nxlog\conf\nxlog.conf:70
2020-10-14 11:48:28 ERROR route graylog_route is not functional without output modules, ignored at C:\Program Files (x86)\nxlog\conf\nxlog.conf:70
2020-10-14 11:48:28 WARNING no routes defined!
2020-10-14 11:48:28 WARNING not starting unused module win
2020-10-14 11:48:28 WARNING not starting unused module graylog
2020-10-14 11:48:28 INFO nxlog-ce-2.10.2150 started

I added the following lines to my config file

<Extension _gelf>
Module xm_gelf
</Extension>

<Input win>
Module im_msvistalog
Query <QueryList>\
<Query Id="0">\
<Select Path="Application">*</Select>\
<Select Path="System">*</Select>\
<Select Path="Security">*</Select>\
</Query>\
</QueryList>
</Input>

<Output graylog>
Module om_udp
host 172.16.101.33
Port 12201
Output Type GELF
</Output>

<Route graylog_route>
Path win => graylog
</Route>

Any help is appreciated.

AskedOctober 14, 2020 - 9:39pm

Answer (1)

Hi,

You might want to correct your "typos", as there's no Output Type, but OutputType.

Also, make sure your Graylog instance accepts UDP on given port.

Regards,

Rafal

Comments (1)

  • ZE_043114's picture

    Thanks for catching that typo. I have now corrected it and I'm not getting any errors in my data log. However, I am still not getting any data in. I have opened the port on my server side as well.