Hello everyone,
I'm trying to setup observium to monitor logs but i'm having some
issues.
I've configured rsyslog and i've followed the instructions at
http://www.observium.org/wiki/Rsyslog_Syslog_Server however I get
the following error in observium.
I've configured the following files:
/etc/rsyslog.conf - added forwarding rule to observium rule aswell
as the following. The spool files get created successfully.
$WorkDirectory /var/lib/rsyslog # where to place spool files
$ActionQueueFileName fwdRule1 # unique name prefix for spool files
$ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as
possible)
$ActionQueueSaveOnShutdown on # save messages to disk on shutdown
$ActionQueueType LinkedList # run asynchronously
$ActionResumeRetryCount -1 # infinite retries if host is down
/etc/rsyslog.d/30-observium.conf - added as per observium
documentation
Error Message I get in Observium:
No syslog entries found!
This device does not have any syslog entries.
Check that the syslog daemon and Observium configuration options are
set correctly, that this device is configured to send syslog to
Observium and that there are no firewalls blocking the messages.
Thank you.
--
Constantinos Coudounaris