Assistance Required for Syslog UDP Input Binding Issue in Graylog 6

Graylog Add-ons
,
1

am experiencing an issue with Graylog 6 where I am unable to bind a Syslog UDP input to a specific IP address and port. Here are the details:

System and Graylog Version:

Graylog Version: 6.x
Operating System: AlmaLinux 9
MongoDB Version: 6.x
Elasticsearch Version: 7.x
Issue Description: I am trying to configure a Syslog UDP input to listen on port 1514. However, when I set the binding address to a specific IP address, Graylog fails to start the input with the following error:

scss
Copy code
bind(…) failed: Cannot assign requested address
When I use 0.0.0.0 as the bind address, the input starts successfully, but this does not meet my requirements.

Steps Taken:

Checked the Graylog configuration in server.conf.
Verified that no other service is using port 1514 by using netstat and ss commands.
Confirmed that firewall rules allow traffic on port 1514.
Restarted Graylog after configuration changes.
Reviewed Graylog logs for any related errors.
Questions:

Is there a specific configuration setting in Graylog 6 that needs adjustment to bind an input to a specific IP address?
Are there any known issues with Graylog 6 regarding binding addresses and ports that I should be aware of?
Could you provide guidance or best practices for configuring Syslog inputs to bind to a specific IP address in Graylog 6?
I would appreciate your assistance in resolving this issue.

Thank you,

2

When we do this on Rocky Linux 8 it works on the systems IP addres and 1514 / UDP

allow_override_date: true
bind_address: <system IP addres>
charset_name: UTF-8
expand_structured_data: false
force_rdns: false
number_worker_threads: 4
override_source: <empty>
port: 1514
recv_buffer_size: 262144
store_full_message: false
timezone: NotSet
3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.