I have mt Gray log server configured and added the syslog UDP input but when I setup a couple devices to send logs I am not receiving anything on the Graylog server. I am not sure where to begin looking for a problem as this is all new to me.

Running sudo tcpdump -i ens160 host 10.53.9.9 and udp port 5140 I do see traffic but if I just run sudo tcpdump -i ens160 host 127.0.0.1 and udp port 5140 I get nothing.

Hi, woodworth [image] Do not received Input Syslog UDP Graylog Central (peer support) Hello, I do not receive any input messages and I can not start the UDP Syslog entry, when I click on start the input it is still failed. What’s the problem ? Best Regards,

Thanks Bahram, That is not my issue I am using 5140 for my input and have my firewall configured to send on the same port. I am able to start the input just fine. Thanks Jeremy

Can you say more precisely how you do it?

Hello @woodworth Your first tcpdump command does make sense, but second not. You tried to dump connections from localhost and port 5140, but there is nothing because, you probably don’t send any logs from localhost. So if you want to show all connection to port 5140, try to use command without “ho…

I found the problem. When Setting up the input for bind address I was using 127.0.0.1. For some reason that does not work. When I changed it to 0.0.0.0 everything started flowing in.

Collecting Syslog

Graylog Central (peer support)

bahram (bahram) January 14, 2020, 5:37pm 3

Hi, woodworth

Topic		Replies	Views
Syslog UDP Input does not generate log. Graylog Central (peer support)	1	488	May 12, 2021
Syslog UDP and Raw/Plaintext UDP not accepting input, TCP works Graylog Central (peer support)	1	1999	July 4, 2018
Do not received Input Syslog UDP Graylog Central (peer support)	6	8271	April 5, 2018
UDP inputs not working Graylog Central (peer support)	2	8047	December 20, 2018
No log input from all sources Graylog Central (peer support)	6	1031	May 14, 2019

Collecting Syslog

Related topics