2014-03-14 03:47 AM
Hello guys,
I have some brutal questions on log hybrid+collector setup
It goes like this:
1) When decoder is in non ssl mode the service is available (device system view), but I cannot add it as an event destination in virtual log collector.
2) When decoder in ssl mode it's service is not available (device system view), but I can add it as a source in destination, the logs are being sent unsuccessfully:
Failed to connect to endpoint [x.x.x.x]:6514. Reason: No route to host
So what did I forgot to do? If it's a network problem why is decoder service unavailable in ssl mode?
Also some documents claim that log collector resides on decoder. Is this true to hybrid? Because I do not see it in installed rpms.
2014-03-14 12:39 PM
It must be a bad image. I am also running a hybrid and here is my rpm -qa
$ rpm -qa |grep nwlog
nwlogcollectorperl-10.2.5.0-1.noarch
nwlogcollectorcontent-10.3.0.12764-5.noarch
nwlogcollector-10.3.2.13408-5.el6.x86_64
nwlogdecoder-10.3.2.2436-5.el6.x86_64
nwlogplayer-10.3.2.2436-5.el6.x86_64
2014-03-16 02:47 PM
Hi,
Support provided me with SA 10.3 ISO, I activated the media repo and deployed the collector and dependencies from the iso. So the image was ok, it just didn't have all the software
Here's the list of dependencies just in case:
Installed:
nwlogcollector.x86_64 0:10.3.2.13408-5.el6
Dependency Installed:
audit-libs.i686 0:2.2-2.el6 compat-libstdc++-33.i686 0:3.2.3-69.el6
cracklib.i686 0:2.8.16-4.el6 db4.i686 0:4.7.25-18.el6_4
elfutils-libelf.i686 0:0.152-1.el6 glibc.i686 0:2.12-1.132.el6
libgcc.i686 0:4.4.7-3.el6 libselinux.i686 0:2.0.94-5.3.el6_4.1
libstdc++.i686 0:4.4.7-3.el6 nss-softokn-freebl.i686 0:3.14.3-3.el6_4
nw-erlang.x86_64 0:R15B-2 nwlogcollectorperl.noarch 0:10.2.5.0-1
pam.i686 0:1.1.1-13.el6 rabbitmq-server.noarch 0:3.0.1-1
2014-03-17 11:24 AM
guys, please get lcsw-10.3.0.12764-5.tgz from support when you install log collector 10.3.
2014-03-18 12:26 PM
There is no such file on the 10.3 ISO and in the sa repo too. What's the deal with this file?
2014-03-18 12:46 PM
it's provided by support, some of the appliances delivered with log collector. you need this package to install log collector 10.3.
I think it include all the dependencies.