# Graylog Not Picking syslog from Cisco Meraki **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [September 11, 2018, 9:34am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782 "2018-09-11T09:34:53Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 11, 2018, 9:34am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/1 "2018-09-11T09:34:53Z")
Hi Graylog community. I have configured graylog on ubuntu 16.04 to receive Cisco Meraki syslogs. Problem is i can receive “localhost” logs but not picking any logs from Cisco. So I’ve tested with “Syslog Test Message Utility 1.0” by creating test syslog messages from Another computer in LAN. So graylog receives that test syslog messages sent by “Syslog Test Message Utility” but it’s not picking any syslog from Cisco Meraki device. Meraki device also configured successfully becasue it sending syslog, I’ve tested with Visual Syslog server on windows machine. Visual syslog server could receive syslogs time to time. SO, What could be the problem. Appreciate your help. Thank you so much. 😀😀 ---
**Author:** ![derPhlipsi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/derphlipsi/32/38_2.png) [@derPhlipsi](https://community.graylog.org/u/derPhlipsi)\ **Post date:** [September 11, 2018, 10:11am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/2 "2018-09-11T10:11:17Z")
Heyo @splash, could there be any Firewall inbetween Meraki and Graylog? And are you using the local syslog from the devices or is the Meraki cloud sending the logs to you? Greetings, Philipp ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 11, 2018, 10:31am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/3 "2018-09-11T10:31:44Z")
Hi DerPhlipsi, Thank you so much for the reply. Yeah i’ve checked Ubuntu firewall is showing as inactive. I think it’s not enabled by default. Meraki Security appliance in our LAN, But the configuration all done in the cloud (Dashboard) but i’m not sure it’s sending from cloud or from local network. But received by the “Visual Syslog server”. Things is i’m installed graylog on VM if windows firewall blocks the syslogs it should block “Syslog Test Message Utility” test syslogs also, but it isn’t. So what can be the problem? It’s not default port, port is 1514, Is any other configuration need to done by conf files? Really i couldn’t find out why the Graylog not receive the logs. Appreciate your help. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [September 11, 2018, 10:45am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/4 "2018-09-11T10:45:53Z")
@splash you should debug starting from your device that sends messages. - can this device reach Graylog IP and Port? - did a test message from the commandline reach Graylog? - your favorite search engine might give you this link: [https://nelsonslog.wordpress.com/2013/04/19/faking-out-remote-syslog-via-netcat/](https://nelsonslog.wordpress.com/2013/04/19/faking-out-remote-syslog-via-netcat/) - is the Input running? - does the Input show errors? You just need to check all ways the package (with the message) will take and check if it passes or not. ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 11, 2018, 11:24am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/5 "2018-09-11T11:24:46Z")
Hi DerPhlipsi, Thank you so much for the reply. > can this device reach Graylog IP and Port? > - did a test message from the command-line reach Graylog? > **Yes it did. Find below.** > **From Visual Syslog server (Sending from 192.168.94.155 (Local PC) to 192.168.94.210 (Graylog server)** > ![c1](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/e/e70d7973b1cfae61b113ef5160c5f6b6f6c11919.png) ![c2](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/2/2072530a951ef94925788afae5c4ba73aee6bc5d.png) > - your favorite search engine might give you this link: [faking out remote syslog via netcat | Nelson's log](https://nelsonslog.wordpress.com/2013/04/19/faking-out-remote-syslog-via-netcat/) **From Command line (Localhost)** ![c4](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/a/aaa52942f02b09d974d6f2c3904838bf11bce275.png) > is the Input running? > - does the Input show errors? > **No It’s running smoothly no errors found so far.** > ![c3](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/a/a8ba8700d5ba38c336f1b1c17cccd16d1a5cd840.png) Thank you so much for help.Appreciate. 😃😃 ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [September 11, 2018, 11:30am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/6 "2018-09-11T11:30:31Z")
is the Visual Syslog Server on **192.168.94.155** the same device that sends the logs from Meraki? ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 11, 2018, 11:59am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/7 "2018-09-11T11:59:22Z")
Hi there… Thank you so much for the reply. Let me explain. 192.168.94.155 and 192.168.94.7 is local IP address in the LAN (Laptops). Syslog server is assign to 192.168.94.210 192.168.94.7 the laptop runs Ubuntu VM. 192.168.94.155 is Laptop use for send test syslogs as images. First image: **Sending from 192.168.94.155 (Local PC) to 192.168.94.210 (Graylog server)** Thank you. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [September 11, 2018, 12:08pm UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/8 "2018-09-11T12:08:31Z")
He @splash Are you able to send test messages from your MERAKI to Graylog? That is what you need to test. ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 11, 2018, 12:18pm UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/9 "2018-09-11T12:18:11Z")
Hi Jan Doberstein Thank you so much for the reply. Yes that what i need. But Graylog not receiving Syslogs from Meraki. Thank you so much for help.Appreciate ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 12, 2018, 4:44am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/10 "2018-09-12T04:44:23Z")
Hi dear Jan Doberstein, i’m Looking for solution yet. 😃😃 Thank you. ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [September 12, 2018, 6:46am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/11 "2018-09-12T06:46:58Z")
@splash you are the only person that can debug your system. @derPhlipsi and I have given you several indications where you can look, what might be tested - nobody from the outside is able to solve this. Special as you did not answer our questions. I’m done in this thread. ---
**Author:** ![derPhlipsi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/derphlipsi/32/38_2.png) [@derPhlipsi](https://community.graylog.org/u/derPhlipsi)\ **Post date:** [September 12, 2018, 9:22am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/12 "2018-09-12T09:22:06Z")
> [@splash](#): > > Yes that what i need. But Graylog not receiving Syslogs from Meraki. Well, again the question that you never answered: > [@derPhlipsi](#): > > could there be any Firewall inbetween Meraki and Graylog If you cannot say for certain, that there is **NOTHING** inbetween Meraki and Graylog blocking a connection, check that first. Any firewall that is blocking, any misconfigurations of IP addresses and Port-numbers or any other network related issue cannot be debugged by us. You’ll need to do that yourself. If you are sure that the issue is within Graylog, then come back and give more details. E.g. Logs from Graylog and Elasticsearch, Input Configuration, Meraki Configuration, etc. Greetings, Philipp ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 12, 2018, 12:10pm UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/13 "2018-09-12T12:10:12Z")
Hello, I mentioned before no any firewall between graylog and meraki. Only windows firewall. With disable windows firewall syslogs still not receiving. But syslog can receive to Visual syslog server. There no any Mis-config of IP. Command-line also reach to Graylog i’ve posted images. And also Syslog Test Message Utility 1.0 could receive test syslog messages form another Computer in same LAN - There are no any mis-config. If you cannot say anything why don’t you openly say **Graylog not support MERAKI** before giving 1000 talks. It will help someone. I’m Done with this tread 😂😂 **nop** i’m done with you. Tread closed!! ---
**Author:** ![derPhlipsi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/derphlipsi/32/38_2.png) [@derPhlipsi](https://community.graylog.org/u/derPhlipsi)\ **Post date:** [September 12, 2018, 12:18pm UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/14 "2018-09-12T12:18:29Z")
> [@splash](#): > > If you cannot say anything why don’t you openly say **Graylog not support MERAKI** before giving 1000 talks. It will help someone Well, Graylog does support Meraki. I’ve been monitoring our Meraki infrastructure for the last 4 month or so with Graylog. So… **YES, Graylog does support Meraki** , since Syslog is a standard that both Graylog and Meraki can speak. > [@splash](#): > > I mentioned before no any firewall between graylog and meraki. Only windows firewall. With disable windows firewall syslogs still not receiving I’m sorry, I didn’t see that you said that. Looked for it and saw it now. Sorry. Another Idea: Do you have any indexer failures? Have a look at _System → Overview_ in your Graylog. Do you have any Indexer failures shown there? Greetings, Philipp ---
**Author:** ![splash](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@splash](https://community.graylog.org/u/splash)\ **Post date:** [September 13, 2018, 5:59am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/15 "2018-09-13T05:59:02Z")
Hi DerPhlipsi, I’ve moved with another product. Installed and works fine. Could receive Meraki Syslog. Thanks! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [September 27, 2018, 6:03am UTC](https://community.graylog.org/t/graylog-not-picking-syslog-from-cisco-meraki/6782/16 "2018-09-27T06:03:58Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.