Hello && Welcome
I had to fix your posts is was very hard to read, please us the markup when posting logs and configuration. For a better understanding please look here
Did you check your logs on both the remote device and Graylog?
By chance have you execute tcpdump on your Graylog server?