Thank you for replying and giving some feedback on the config.
These are the changes I’ve made.
/etc/rsyslog.conf
I’ve commented out the calls to the UDP module and UDPServerRun and uncommented its equivalents in TCP.
$ModLoad imtcp
$InputTCPServerRun 514
Updated /etc/rsyslog/rsyslog.d/50-telegraf.con
*.* @@(o)127.0.0.1:6514;RSYSLOG_SyslogProtocol23Format
Thank you.
Restarted rsyslog
Rebuilt this line in /etc/telegraf/telegraf.conf
server = "tcp://localhost:6514"
Thank you.
This is the output of
telegraf --config /etc/telegraf/telegraf.conf
E! Unable to append to /etc/telegraf/telegraf.log (open /etc/telegraf/telegraf.log: permission denied), using stderr
2018-09-26T17:56:26Z D! Attempting connection to output: influxdb
2018-09-26T17:56:26Z D! Successfully connected to output: influxdb
2018-09-26T17:56:26Z I! Starting Telegraf v1.7.4
2018-09-26T17:56:26Z I! Loaded inputs: inputs.cpu inputs.swap inputs.system inputs.syslog inputs.disk inputs.diskio inputs.kernel inputs.mem inputs.processes
2018-09-26T17:56:26Z I! Loaded aggregators:
2018-09-26T17:56:26Z I! Loaded processors:
2018-09-26T17:56:26Z I! Loaded outputs: influxdb
2018-09-26T17:56:26Z I! Tags enabled: host=myremotebox
2018-09-26T17:56:26Z I! Agent Config: Interval:10s, Quiet:false, Hostname:"myremotebox", Flush Interval:10s
2018-09-26T17:56:26Z E! Service for input inputs.syslog failed to start, exiting
listen tcp 127.0.0.1:6514: bind: address already in use
My effort to chown the telegraf.log to telegraf:telegraf to root:root fails. I do not know which user:group will work.
Based on the issue pages of the syslog plugin in Github, it was suggested to use UDP which is why I’ve attempted to do so. Both UDP and TCP return the same error in its equivalent form.
As before, Debian is reporting via netstat -tulpn | grep 6514
tcp 0 0 127.0.0.1:6514 0.0.0.0:* LISTEN 4685/telegraf
Only one entry and my previous post applies. Restarting telegraf runs everything except the syslog. Clearly telegraf cannot start syslog plugin because telegraf has beaten itself to it. The only other place where I find 6514 in a config file is this commented out line above my server declaration.
## Specify an ip or hostname with port - eg., tcp://localhost:6514, tcp ://10.0.0.1:6514
