Forum Discussion
jhanington_1353
Nimbostratus
NimbostratusConnection failed syslog errors
I set up the F5 to send syslogs to logstash and I keep seeing these messages...
{
"message": "<43>Mar 17 12:15:04 local/lb3 err syslog-ng[23508]: Connection failed; error='Connection refused (...
Hannes_RappNimbostratus
NimbostratusThe interesting line is:
"err syslog-ng[23508]: Connection failed; error='Connection refused (111)', time_reopen='60'"
- In my experience, the "connection refused" message indicates that the TCP SYN packet received it's intended destination, but the TCP socket was not established. This usually means one of two things - either the application supposed to listen on a given TCP port is not up and running, or the TCP destination port you have configured is incorrect.
- Recommend to use the Telnet tool to try and verify TCP connectivity: e.g. "telnet 10.0.0.12 Your-TCP-Port-Number"
