458 reputation
28
bio website nxlog.org
location
age
visits member for 2 years, 5 months
seen 14 hours ago

As I'm affiliated with nxlog, my answers might be biased in related topics.

nxlog


Feb
8
comment Configuring LogStash properly w/ nxlog
Have you tried it without the Query to see if eventlogs are read at all?
Dec
25
answered nxlog parse_csv fails on odd character in IIS log file
Dec
21
awarded  Commentator
Dec
21
comment Query specific logs from event log using nxlog
There is an $EventID field which you can use instead of matching on $raw_event, see my answer below.
Dec
21
answered Query specific logs from event log using nxlog
Nov
27
answered How does an administrator generalize alerting when an event doesn't happen?
Nov
4
awarded  Yearling
Sep
9
comment Simplify NXLOG Setup for me (or alternative)
How do you want to "save off" your event logs? Into a file? If yes, in what format? How do you want to use it later?
Jul
22
answered IIS logs to Logstash with nxlog
Jun
25
answered Centralized apache logging with rsyslog
May
15
answered Rsyslog: Difference between logging to a UNIX domain socket or an INET socket (UDP)
Mar
29
awarded  Revival
Mar
5
revised SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
spelling correction
Feb
28
awarded  Scholar
Feb
28
accepted SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
Feb
28
comment SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
Thanks a lot! My problem was indeed caused by the extra key with the short hostname. I just wish it would be easier to debug such issues so that the logs indicate what the problematic principal is.
Feb
26
comment SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
The host is called 'debian-squeeze' as returned by hostname. The IP maps back to FQDN, so the command you gave returns 'debian-squeeze.realm'. As a side-note: I have two keys set up for this host, one for the fqdn and one for the short name. Could this be messing up?
Feb
26
comment SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
DNS is fine. Only localhost entries in /etc/hosts.
Feb
21
comment SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
These are all lxc containers running on the same physical host. Clocks couldn't be more synchronized than this.
Feb
18
revised SSH Kerberos authentication fails with “Wrong principal in request/Got no client credentials” on debian squeeze
edited tags