Error when starting input

[ixx2i (Javier Gilabert)]

Hi im triying to set up diferent imputs for diferent ips, so i can have the information separated by client since we want to send the information to the clients separatedly but when triying to set up a new input this error pops:

2021-04-14T18:40:24.104+02:00 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID <60771909b73b5c3c6517cb3f> misfired. Reason: null
org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: java.lang.IllegalArgumentException
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?]
at org.graylog2.shared.inputs.InputLauncher$1.run(InputLauncher.java:84) [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0_282]
at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0_282]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0_282]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0_282]
at java.lang.Thread.run(Thread.java:748) [?:1.8.0_282]
Caused by: org.graylog2.plugin.inputs.MisfireException: java.lang.IllegalArgumentException
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:135) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:155) ~[graylog.jar:?]
… 7 more
Caused by: java.lang.IllegalArgumentException
at java.util.concurrent.ThreadPoolExecutor.(ThreadPoolExecutor.java:1314) ~[?:1.8.0_282]
at java.util.concurrent.ThreadPoolExecutor.(ThreadPoolExecutor.java:1237) ~[?:1.8.0_282]
at java.util.concurrent.Executors.newFixedThreadPool(Executors.java:151) ~[?:1.8.0_282]
at org.graylog2.inputs.transports.netty.EventLoopGroupFactory.executor(EventLoopGroupFactory.java:69) ~[graylog.jar:?]
at org.graylog2.inputs.transports.netty.EventLoopGroupFactory.create(EventLoopGroupFactory.java:46) ~[graylog.jar:?]
at org.graylog2.inputs.transports.UdpTransport.getBootstrap(UdpTransport.java:86) ~[graylog.jar:?]
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:124) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:155) ~[graylog.jar:?]
… 7 more
2021-04-14T18:40:24.107+02:00 INFO [InputStateListener] Input [Syslog UDP/60771909b73b5c3c6517cb3f] is now STARTING
2021-04-14T18:40:24.109+02:00 INFO [InputStateListener] Input [Syslog UDP/60771909b73b5c3c6517cb3f] is now FAILED

The new config that i want to use is bind_address 172.16.15.200 wich is where the data is comming from and port 1515

At the moment im using an imput which its bind address is 0.0.0.0/0 and port 1514 it works just fine but id like to use different imputs, any idea?

[gsmith]

Hello,

@ixx2i

id like to use different imputs, any idea?

If you bind one input to 0.0.0.0 it will listen on any network interface and all networks that Graylog server is connected to. On the other hand, binding to a specific IP will let the input listen only on that IP and Port.

With that being said, what other configuration have you tried?
How are you sending logs to Graylog (i.e. nxlog, beats, rsyslog, etc…)
Perhaps using a different port with the IP address 172.16.15.200, say 1518?
Are you getting message from 172.16.15.200 now using 0.0.0.0/0 and port 1514?
Can you show the full configuration of the INPUT with the bind address using port 1515?
Here is an example, does it look something like this?

Hope this helps.