# How to create input to receive wazuh-hids logs

**URL:** <https://community.graylog.org/t/how-to-create-input-to-receive-wazuh-hids-logs/18715>\
**Category:** Graylog Central (peer support)\
**Created:** [February 8, 2021, 7:23am UTC](https://community.graylog.org/t/how-to-create-input-to-receive-wazuh-hids-logs/18715 "2021-02-08T07:23:17Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rahesh](https://avatars.discourse-cdn.com/v4/letter/r/87869e/32.png) [@rahesh](https://community.graylog.org/u/rahesh)\
**Post date:** [February 8, 2021, 7:23am UTC](https://community.graylog.org/t/how-to-create-input-to-receive-wazuh-hids-logs/18715/1 "2021-02-08T07:23:17Z")

</div>

Can any one help me create an input to receive wazuh-hids logs? I tried to create udp input on port 1514, it didn’t work.

---

<div class="post-metadata">

**Author:** ![cawfehman](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cawfehman/32/4132_2.png) [@cawfehman](https://community.graylog.org/u/cawfehman)\
**Post date:** [February 10, 2021, 5:31am UTC](https://community.graylog.org/t/how-to-create-input-to-receive-wazuh-hids-logs/18715/2 "2021-02-10T05:31:39Z")

</div>

we can help, but we’ll need more information. What did you do? Why do you say it didn’t work? Error messages, configs, etc… otherwise… 42 🙂

---

<div class="post-metadata">

**Author:** ![rahesh](https://avatars.discourse-cdn.com/v4/letter/r/87869e/32.png) [@rahesh](https://community.graylog.org/u/rahesh)\
**Post date:** [February 10, 2021, 5:54am UTC](https://community.graylog.org/t/how-to-create-input-to-receive-wazuh-hids-logs/18715/3 "2021-02-10T05:54:35Z")

</div>

Thank you for responding, I figured it out. I believe the issue occurred because I created the input on the port 1514 which is used by wazuh manager, so i changed the input port and added a syslog output config in wazuh manager. Now it’s working.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [February 24, 2021, 5:55am UTC](https://community.graylog.org/t/how-to-create-input-to-receive-wazuh-hids-logs/18715/4 "2021-02-24T05:55:20Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.