# Input log problem **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [January 14, 2020, 10:14am UTC](https://community.graylog.org/t/input-log-problem/13459 "2020-01-14T10:14:14Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![ykl](https://avatars.discourse-cdn.com/v4/letter/y/9de0a6/32.png) [@ykl](https://community.graylog.org/u/ykl)\ **Post date:** [January 14, 2020, 10:14am UTC](https://community.graylog.org/t/input-log-problem/13459/1 "2020-01-14T10:14:14Z")
I install Graylog 3 on Centos 7.0, when I completed input setup and try start input, but input show failed and graylog show below error message: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Permission denied 2020-01-14T17:43:11.605+08:00 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID \<5e1d42925c10c1075bde32ad\> misfired. Reason: bind(…) failed: Permission denied. org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Permission denied at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?] at org.graylog2.shared.inputs.InputLauncher$1.run(InputLauncher.java:84) [graylog.jar:?] at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:181) [graylog.jar:?] at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:1.8.0\_232] at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:1.8.0\_232] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:1.8.0\_232] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:1.8.0\_232] at java.lang.Thread.run(Thread.java:748) [?:1.8.0\_232] Caused by: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Permission denied at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:135) ~[graylog.jar:?] at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:155) ~[graylog.jar:?] … 7 more How to solve this problem? thanks YK ---
**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\ **Post date:** [January 14, 2020, 2:55pm UTC](https://community.graylog.org/t/input-log-problem/13459/2 "2020-01-14T14:55:35Z")
Check if port used in Input is not bind (doesn’t listen) by another process… ---
**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\ **Post date:** [January 14, 2020, 4:11pm UTC](https://community.graylog.org/t/input-log-problem/13459/3 "2020-01-14T16:11:55Z")
in addition to that @ykl you might check if you do use a port that is below 1024 … ---
**Author:** ![ykl](https://avatars.discourse-cdn.com/v4/letter/y/9de0a6/32.png) [@ykl](https://community.graylog.org/u/ykl)\ **Post date:** [January 15, 2020, 3:37am UTC](https://community.graylog.org/t/input-log-problem/13459/4 "2020-01-15T03:37:11Z")
Even try input local server, but have same error. Error message from Graylog is on the below: An input has failed to start (triggered 18 hours ago) Input 5e1d889d5c10c1075bde7eb3 has failed to start on node 5b2a83cd-3dbf-45e4-bfa6-165f89c6df4f for this reason: »bind(…) failed: Permission denied.«. This means that you are unable to receive any messages from this input. This is mostly an indication for a misconfiguration or an error. You can click here to solve this. Input config is on the below: allow\_override\_date: false bind\_address: 192.168.1.3 (Same as Graylog IP) expand\_structured\_data: false force\_rdns: false number\_worker\_threads: 2 override\_source: port: 514 recv\_buffer\_size: 262144 store\_full\_message: true ---
**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\ **Post date:** [January 15, 2020, 7:27am UTC](https://community.graylog.org/t/input-log-problem/13459/5 "2020-01-15T07:27:55Z")
As @jan noted, you can’t setup input to listen on port below 1024 (0-1024), because graylog by default run as normal user (graylog) which can’t bind port below to 1024 (linux/unix behaviour). So because you try to use port 514, which is below to 1024 - simple math 🙂 it won’t work. You have 2 options: 1. Either use port higher than 1024 in Input, for example 1514 and setup your devices to send logs to this port 2. Or if you can’t setup different port than 514 on your devices use firewall redirection Anyway check graylog FAQ: [https://docs.graylog.org/en/3.1/pages/faq.html#how-can-i-start-an-input-on-a-port-below-1024](https://docs.graylog.org/en/3.1/pages/faq.html#how-can-i-start-an-input-on-a-port-below-1024) And great graylog videos: [https://www.graylog.org/resources/inputs](https://www.graylog.org/resources/inputs) > **[Resources | Feed Your Graylog | Graylog](https://www.graylog.org/resources/feed-your-graylog)** > > Learn how to get different types of logs into Graylog > **[Resources for Optimizing Log Management | Graylog](https://www.graylog.org/resources)** > > Browse Graylog's library of webinars, white papers, and product data sheets to learn more about the global state of log management, and how to maximize the Graylog solution for your organization. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [January 29, 2020, 7:38am UTC](https://community.graylog.org/t/input-log-problem/13459/6 "2020-01-29T07:38:59Z")
Closed on January 29, 2020, 7:38am UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.