Can't setup the syslog input #183
Unanswered
itshikanov
asked this question in
Q&A
Replies: 2 comments 4 replies
-
Huh. 🤔 I'm unsure, actually. In general, the syslog listener is verified to be working by automated tests. Are you seeing any output on the exporter's stdout/stderr streams? Have you tried explicitly setting the syslog format (most possibly from |
Beta Was this translation helpful? Give feedback.
1 reply
-
config
tags = ["nginx"] must exist in syslog config. In documentation, for Kubernetes section, config-map has no tags line. |
Beta Was this translation helpful? Give feedback.
3 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
version: 1.8.0
cat config.hcl
Nginx:
log_format syslog_format '$remote_addr\t$remote_user\t$request\t$status\t$body_bytes_sent\t$http_referer\t$http_user_agent\t$http_x_forwarded_for'; .... access_log syslog:server=127.0.0.1:8513,facility=local7,tag=nginx,severity=info syslog_format;
syslog string from ngrep:
U 127.0.0.1:57279 -> 127.0.0.1:8513 #1034 <190>Feb 18 09:11:00 test-k8s-1 nginx: 185.132.196.98.-.HEAD / HTTP/1.1.200.0.-.curl/7.58.0.-
String from strace:
[pid 1669] <... recvfrom resumed> "<190>Feb 18 09:11:48 test-k8s-1 nginx: 185.132.196.98\t-\tHEAD / HTTP/1.1\t200\t0\t-\tcurl/7.58.0\t-", 65536, 0, {sa_family=AF_INET, sin_port=htons(57279), sin_addr=inet_addr("127.0.0.1")}, [112->16]) = 93
Result:
HELP nginx_parse_errors_total Total number of log file lines that could not be parsed
TYPE nginx_parse_errors_total counter
nginx_parse_errors_total 0
What wrong?
Beta Was this translation helpful? Give feedback.
All reactions