Log decoder/Log collector is not receiving logs from VLC.

[RSAAdmin]

We have 1 VLC (remote collector) and VLC is forwarding logs to 2 destination

(1) PDC log collector + log decoder (10.10.13.126) and to

(2) BCP  og collector + log decode (10.162.4.147)

we are getting logs at PDC site but not able to get logs at BCP.

Log collector_BCP-->config->logs

Can anyone help us to resolve this.

Thanks and Regards,

[Anonymous]

Hi Priya,

As per my understanding, you want to achieve the failover or HA mode of your two log decoders with the help of VLC.

This is the issue of RabbitMQ & puppet server.

Regards,

Deepanshu Sood.

[RSAAdmin]

Hi Deepanshu,

Thanks for you reply. We are trying to configure replication.

should I restart rabbitmq-server? Any command which you can suggest?

Thanks and Regards,

[Anonymous]

HI Priya,

In the VLC, you need to add the Sec. Log Decoder IP address at the secondary place.

Kindly check the error logs, check what’s the error and at what position it gets stucked.

Regards,

Deepanshu Sood.

[Anonymous]

Hi Priya,

Do you get any solution regarding the issue?

Please update. Thanks.

Regards,

Deepanshu Sood.

[RSAAdmin · Accepted solution]

Hi Deepanshu,

Finally we have configured replication.

For this we  added one remote collector. And than added local collector of both location at 'Local Collector' tab of remote collector. But the real problem which we were facing was 'our BCP location was not showing logs'

Solution:

1. Format of logs was not appropriate, so we changed the configuration of syslog client.

2. Check service status at port 514.

One of the main problem was 'We were not able to add Local collector of BCP at remote collector'

so  go to Remote collector sevice(10.4.0.2 version)-->view-->explore-->event broker-->stats-->queues and remove 'shovel-(all_evensource_trye)-BCP queue.

after that add these queue manually with correct ip address.

After performing these step, we were able to fix this issues.

Thanks and Regards,

Priya Malik

(677646)