Hello Influx community,
I’m currently stuck with my project in displaying any data on Chronograf, although the InfluxDB is connected to its source. The important data i needed is to view the Syslogs coming from the Syslog server, how do i view it in Chronograf the dropdown is empty. btw, the InfluxDB and Chronograf instances are running on a standalone/offline environment.
Hello @brpascua88,
Welcome!
You’re using the telegraf config?
Can you please share it?
Hello @Anaisdg,
Thank you for responding to my query. I can’t upload or attached the telegraf config but here’s the syslog part of telegraf config installed on my syslog server:
# Accepts syslog messages following RFC5424 format with transports as per RFC5426, RFC5425, or RFC6587
[[inputs.syslog]]
## Specify an ip or hostname with port - eg., tcp://localhost:6514, tcp://10.0.0.1:6514
## Protocol, address and port to host the syslog receiver.
## If no host is specified, then localhost is used.
## If no port is specified, 6514 is used (RFC5425#section-4.1).
server = “tcp://:6514”
server = “tcp://localhost:6514”
## TLS Config
# tls_allowed_cacerts = [“/etc/telegraf/ca.pem”]
# tls_cert = “/etc/telegraf/cert.pem”
# tls_key = “/etc/telegraf/key.pem”
## Period between keep alive probes.
## 0 disables keep alive probes.
## Defaults to the OS configuration.
## Only applies to stream sockets (e.g. TCP).
# keep_alive_period = “5m”
## Maximum number of concurrent connections (default = 0).
## 0 means unlimited.
## Only applies to stream sockets (e.g. TCP).
max_connections = 10
## Read timeout is the maximum time allowed for reading a single message (default = 5s).
## 0 means unlimited.
# read_timeout = “5s”
## The framing technique with which it is expected that messages are transported (default = “octet-counting”).
## Whether the messages come using the octect-counting (RFC5425#section-4.3.1, RFC6587#section-3.4.1),
## or the non-transparent framing technique (RFC6587#section-3.4.2).
## Must be one of “octet-counting”, “non-transparent”.
# framing = “octet-counting”
## The trailer to be expected in case of non-transparent framing (default = “LF”).
## Must be one of “LF”, or “NUL”.
trailer = “LF”
## Whether to parse in best effort mode or not (default = false).
## By default best effort parsing is off.
best_effort = true
## The RFC standard to use for message parsing
## By default RFC5424 is used. RFC3164 only supports UDP transport (no streaming support)
## Must be one of “RFC5424”, or “RFC3164”.
syslog_standard = “RFC5424”
## Character to prepend to SD-PARAMs (default = “_”).
## A syslog message can contain multiple parameters and multiple identifiers within structured data section.
## Eg., [id1 name1=“val1” name2=“val2”][id2 name1=“val1” nameA=“valA”]
## For each combination a field is created.
## Its name is created concatenating identifier, sdparam_separator, and parameter name.
sdparam_separator = “_”
And below is the outputs plugin
# Configuration for sending metrics to InfluxDB
[[outputs.influxdb_v2]]
## The URLs of the InfluxDB cluster nodes.
## Multiple URLs can be specified for a single cluster, only ONE of the
## urls will be written to each interval.
urls = [“http://172.22.6.221:8086”]
## Token for authentication.
token = “-a43zmxPN-FPcjuj4llsFl2KuExFBJRf5fdSAzV-Ls9ocDmcZTiuM7oNDOPeAgZCtvzGBowWkcFhdBPgoUUAOw==”
## Organization is the name of the organization you wish to write to; must exist.
organization = “FIS-PNB”
## Destination bucket to write into.
bucket = “Syslog Server”
## The value of this tag will be used to determine the bucket. If this
## tag is not set the ‘bucket’ option is used as the default.
# bucket_tag = “”
## If true, the bucket tag will not be added to the metric.
exclude_bucket_tag = false
## Timeout for HTTP messages.
# timeout = “5s”
## Additional HTTP headers
# http_headers = {“X-Special-Header” = “Special-Value”}
## HTTP Proxy override, if unset values the standard proxy environment
## variables are consulted to determine which proxy, if any, should be used.
## HTTP User-Agent
user_agent = “telegraf”
## Content-Encoding for write request body, can be set to “gzip” to
## compress body or “identity” to apply no encoding.
# content_encoding = “gzip”
## Enable or disable uint support for writing uints influxdb 2.0.
# influx_uint_support = false
## Optional TLS Config for use on HTTP connections.
# tls_ca = “/etc/telegraf/ca.pem”
# tls_cert = “/etc/telegraf/cert.pem”
# tls_key = “/etc/telegraf/key.pem”
## Use TLS but skip chain & host verification
# insecure_skip_verify = false
