I am using Graylog 4.2.5 and I am currently trying to let different systems send logs to it.
In the past, I had several times the problem, that messages, that were sent to syslog-inputs were missing because of format problems.
If I created “RAW”-inputs, everything has been visible, but I had to define extractors, etc.
Now, I am trying to let Arista switches send their logs to Graylog.
→ Created RAW inputs for UDP and TCP.
→ Sending syslog to them (tried both).
But: There are no messages.
Graylog server.log does not show anything.
Tried another syslog-server, which is showing:
Jan 14 14:06:36 switch-i2-01311-1 Cli: SYS-5-CONFIG_I: Configured from console by admin on vty6 (10.49.0.180)
How can I debug the problem?
tcpdump shows up, that messages are arriving (high port).
Thank you for your help