jhanington_1353
Mar 17, 2015Nimbostratus
Connection failed syslog errors
I set up the F5 to send syslogs to logstash and I keep seeing these messages...
{
"message": "<43>Mar 17 12:15:04 local/lb3 err syslog-ng[23508]: Connection failed; error='Connection refused (111)', time_reopen='60'",
"@version": "1",
"@timestamp": "2015-03-17T16:17:14.229Z",
"host": "10.0.0.12:52838",
"type": "syslog",
"tags": [
"_grokparsefailure"
],
"syslog_severity_code": 5,
"syslog_facility_code": 1,
"syslog_facility": "user-level",
"syslog_severity": "notice"
}
(Don't mind the _grokparsefailure, I am in the process of writing patterns to categorize the syslogs) What are these errors and how do I trace them down to fix?