Hello everyone,
I'm trying to setup observium to monitor logs but i'm having some issues.
I've configured rsyslog and i've followed the instructions at http://www.observium.org/wiki/Rsyslog_Syslog_Server however I get the following error in observium.
I've configured the following files: /etc/rsyslog.conf - added forwarding rule to observium rule aswell as the following. The spool files get created successfully.
$WorkDirectory /var/lib/rsyslog # where to place spool files $ActionQueueFileName fwdRule1 # unique name prefix for spool files $ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible) $ActionQueueSaveOnShutdown on # save messages to disk on shutdown $ActionQueueType LinkedList # run asynchronously $ActionResumeRetryCount -1 # infinite retries if host is down
/etc/rsyslog.d/30-observium.conf - added as per observium documentation
Error Message I get in Observium:
No syslog entries found!
This device does not have any syslog entries. Check that the syslog daemon and Observium configuration options are set correctly, that this device is configured to send syslog to Observium and that there are no firewalls blocking the messages.
Thank you.