IPTables input not working

[MrDienns]

Hello

Im trying to get the iptables input to work for telegraf. After already having a bunch of issues using permissions, I finally got it "working". The systemd output from iptables can be found here: https://hastebin.com/umikevodos.vbs

To be me this looks like iptables is properly being able to use sudo, as defined in the config, and upload its data to the server. Whenever I check the server though, there are no measurements for iptables. There's nothing there. I tested this on multiple servers, and none of them is pushing data towards InfluxDB.

All other inputs from telegraf seem to work fine.

Ubuntu 16.04 LTS
Telegraf 1.1.1

[sparrc]

you'll need to provide more information for debugging this. Can you try using a file output plugin to test getting metrics? did you try running with different user permissions?

[MrDienns]

Here is a more detailed log, also containing the other metrics that I used.
https://hastebin.com/emoveyucec.coffeescript
Like I said before, as you can see all other inputs from telegraf work fine.

Here is a screenshot my InfluxDB query;
http://prntscr.com/dtf8x4

As you can see, there's only one database. No mistakingly using the wrong one. You can see all of the other measurements, like I said before, those work fine. IPTables is just not pushing data into InfluxDB. It looks like its able to gather data, but I cant confirm this. I tried running it as root, still no results in InfluxDB. Permissions should no longer be the issue.

http://prntscr.com/dtfadu
Here's another screenshot of the other metrics data being used in Grafana. It's simply IPTables which does not seem to work.

Note: I'm a beginner when it comes to Linux, if you want me to do something, please provide some commands. :)

[sparrc]

please provide the configuration entry for the iptabels plugin

[MrDienns]

Here you go
https://hastebin.com/qoraxetoru.lua

[sparrc]

what happens if you run sudo iptables -nvL INPUT -t filter -x? Try running this as the telegraf user as well, does it ask for a password?

[MrDienns]

Result of the command: https://hastebin.com/cojodofegu.sql
Executing it as telegraf means that I have to login, I suppose. It's asking for a password.

[sparrc]

did you edit your sudoers file?: https://github.com/influxdata/telegraf/tree/master/plugins/inputs/iptables#using-sudo

[MrDienns]

Yes I did. Pretty sure you're able to see from the first log I provided that IPTables is able to open a session with root privileges. Never the less, the sudoers file contains
telegraf ALL=(root) NOPASSWD:ALL at the moment since the given one on the GitHub page did not work properly duo to insufficient permissions issue.

[sparrc]

I don't think it's setup properly if it's asking for a password. The point is that telegraf needs to be able to run a "sudo" command without a password

[MrDienns]

It asks for a password when I try to login as the user, like I said. It does not ask for a password when using sudo, as set up in the sudoers file: telegraf ALL=(root) NOPASSWD:ALL

[sparrc]

Can you try using a file output plugin to test getting metrics? Send the metrics to stdout and see if the iptables metrics are appearing

[MrDienns]

I replaced the InfluxDB output with a file output and let it run about half a minute.
Here's the result.

https://hastebin.com/eketosujon.go

(Sorry for the wait)