I have issue with fortigate VPN logs on graylog. Even though I can see that fortigate sends the sylogs to graylog and I can see them with tcpdump but graylog not receiving them.
I tried different port numbers like 1514, 15514 and different inputs like syslog udp, plaintext udp., cef udp but still nothing received. I have other inputs from other devices and no issues. Also same fortigate device sends logs to rsyslog without any issue.
I checked date and time settings on both fortigate and graylog, they are identical.
Am I missing something? Please advise.
Thank you very much in advance.