Input start fail


I have error input start failure but our environment still can sent log to Graylog.

Please explant to me

image

Hi;

Once I had the same problem as you. In my case,the network interface associated with a particular input was down :sweat_smile:.

On the other hand, do you have any other input configured to listen for the same port tcp/udp? (two inputs can not listen on the same port tcp/udp ). If this is not the case … have you tried restarting the graylog service? (on another occasion, the same thing happened to me, an input did not start and I resolved it by restarting the service)

I hope this helps.

In this case use 514 port only.

I will try restart graylog service.

I restart Graylog service by graylog-ctl reconfigure already but input still fail.

Hi Chreawich;

How many inputs do you have ? What address, ports and protocol use each one ?

Does it show fail on the System > Inputs page or is this only the Warning you have? The Warning will not remove themself after resolve. You would need to x the message away.

FYI

image

“low ports” does not work - please see this Part in the FAQ

http://docs.graylog.org/en/2.4/pages/faq.html#how-can-i-start-an-input-on-a-port-below-1024

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.