Graylog Cisco Switch Input Failed

Graylog Central (peer support)
5

If I were you, I would try:

  1. Change bind_address to 0.0.0.0 in Input.
  2. Try to lower number of number_worker_threads: to 2
  3. After each change, try to start Input with Start input button and check log.
  4. Check if the port 1514 isn’t used by another process: ss -ulpn | grep 1514
  5. Check if you have selinux activated, if yes change to permissive or disabled.
  6. If won’t help, try to create new Input with default parameter, change only non-used port to >1024 (other than 1514)
  7. If cisco can change syslog port to other than 514, change it directly to graylog input port, so don’t iptables to redirect
1 Like