Error when starting input

Hi im triying to set up diferent imputs for diferent ips, so i can have the information separated by client since we want to send the information to the clients separatedly but when triying to set up a new input this error pops:

2021-04-14T18:40:24.104+02:00 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID <60771909b73b5c3c6517cb3f> misfired. Reason: null
org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: java.lang.IllegalArgumentException
at org.graylog2.plugin.inputs.MessageInput.launch( ~[graylog.jar:?]
at org.graylog2.shared.inputs.InputLauncher$ [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$ [graylog.jar:?]
at java.util.concurrent.Executors$ [?:1.8.0_282]
at [?:1.8.0_282]
at java.util.concurrent.ThreadPoolExecutor.runWorker( [?:1.8.0_282]
at java.util.concurrent.ThreadPoolExecutor$ [?:1.8.0_282]
at [?:1.8.0_282]
Caused by: org.graylog2.plugin.inputs.MisfireException: java.lang.IllegalArgumentException
at org.graylog2.inputs.transports.UdpTransport.launch( ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch( ~[graylog.jar:?]
… 7 more
Caused by: java.lang.IllegalArgumentException
at java.util.concurrent.ThreadPoolExecutor.( ~[?:1.8.0_282]
at java.util.concurrent.ThreadPoolExecutor.( ~[?:1.8.0_282]
at java.util.concurrent.Executors.newFixedThreadPool( ~[?:1.8.0_282]
at org.graylog2.inputs.transports.netty.EventLoopGroupFactory.executor( ~[graylog.jar:?]
at org.graylog2.inputs.transports.netty.EventLoopGroupFactory.create( ~[graylog.jar:?]
at org.graylog2.inputs.transports.UdpTransport.getBootstrap( ~[graylog.jar:?]
at org.graylog2.inputs.transports.UdpTransport.launch( ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch( ~[graylog.jar:?]
… 7 more
2021-04-14T18:40:24.107+02:00 INFO [InputStateListener] Input [Syslog UDP/60771909b73b5c3c6517cb3f] is now STARTING
2021-04-14T18:40:24.109+02:00 INFO [InputStateListener] Input [Syslog UDP/60771909b73b5c3c6517cb3f] is now FAILED

The new config that i want to use is bind_address wich is where the data is comming from and port 1515

At the moment im using an imput which its bind address is and port 1514 it works just fine but id like to use different imputs, any idea?


If you bind one input to it will listen on any network interface and all networks that Graylog server is connected to. On the other hand, binding to a specific IP will let the input listen only on that IP and Port.

With that being said, what other configuration have you tried?
How are you sending logs to Graylog (i.e. nxlog, beats, rsyslog, etc…)
Perhaps using a different port with the IP address, say 1518?
Are you getting message from now using and port 1514?
Can you show the full configuration of the INPUT with the bind address using port 1515?
Here is an example, does it look something like this?

Hope this helps.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.