Syslog Monitoring not working completely

Started by djdenney, April 19, 2021, 04:11:33 PM

Previous topic - Next topic

djdenney

Hello all,
I have configured syslog monitoring on the netxms server and agent nodes.  I am getting all managed nodes /var/log/messages to show up on the Netxms servers /var/log/messages, however when I view syslog in nxmc, nothing shows up.  It was working in a previous version, but when I upgraded to the latest version, nothing show up.

Victor Kirhenshtein

From nxmc you see syslog records received by NetXMS server process. Check that uinternal syslog receiver is enabled and listening on correct port, and that you forward syslog messages to correct port. As you can see messages from external nodes in /var/log/messages on NetXMS server I suspect that system syslog daemon receives them, not netxmsd process.

Best regards,
Victor

djdenney

Hi Victor,

I have the following syslog server settings:

EnableSyslogReceiver 1
SyslogListenPort 514  <-- default

Victor Kirhenshtein

Settings are correct, but are server really listen on that port? You can check with command

netstat -aunp | grep 514

you should see netxmsd process listening on that port.

Best regards,
Victor

djdenney

Hi Victor,

Yes, the NetXMS server is listening on port 514.  Any ideas what else might be the issue?

Filipp Sudanov

Just to double-check, can you show your output of
netstat -aunp | grep 514

if you set debuglevel=6 in server config file and start server for a minute, do you see something like
Listening for syslog messages on UDP socket
in server log?