Hello,
I’m a noob with loki and looking to forward syslog-ng>grafana-agent>loki.
I’m running syslog-ng v3.25, grafana-agent v0.32 and loki v2.7.3 on CentOS VM’s.
I have 3 syslog-ng servers forwarding logs to other destinations and added the following sending the logs to the loadbalancer for my loki cluster.
destination d_loki { syslog(“loki1” transport(“tcp”) port(1514)); };
Then I have the following config in the grafana-agents which are running on my loki nodes:
server:
log_level: info
logs:
configs:
- name: default
positions:
filename: /tmp/positions.yaml
scrape_configs:- job_name: syslog_ng
syslog:
listen_address: 0.0.0.0:1514
label_structured_data: yes
labels:
job: syslog_ng_ad
clients: - url: http://{my hostname}:3100/loki/api/v1/push
- job_name: syslog_ng
Getting this when running the journalctl command on my grafana-agent:
Apr 13 14:07:03 {my hostname} grafana-agent[8701]: ts=2023-04-13T19:07:03.53261943Z caller=transport.go:286 level=warn component=logs logs_config=default msg=“error initializing syslog stream” err=EOF
No matter what tweaks I make to the config I’m still getting this error. Any insights?
Thanks,
Christine