# Ip address in graylog-server.log

**URL:** https://community.graylog.org/t/ip-address-in-graylog-server-log/20642
**Category:** Graylog Central (peer support)
**Tags:** filebeat-linux, send-csv-logsnx, nosendlogfblx, nodatanx, nxlog, winlogbeat, sidecar
**Created:** [July 26, 2021, 2:02pm UTC](https://community.graylog.org/t/ip-address-in-graylog-server-log/20642 "2021-07-26T14:02:46Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)
#### Post date: [July 26, 2021, 9:51pm UTC](https://community.graylog.org/t/ip-address-in-graylog-server-log/20642/2 "2021-07-26T21:51:55Z")

</div>

Hello && Welcome

> [@colttt](#):
>
> 2021-07-26T15:54:09.361+02:00 WARN [UdpTransport] receiveBufferSize (SO\_RCVBUF) for input SyslogUDPInput{title=Syslog UDP, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=b8865e93-c3fb-4033-b66a-c8afaeexxxcb} (channel [id: 0x88b37d6b, L:/0:0:0:0:0:0:0:0%0:1514]) should be 425985 but is 425984.

I think this post might give you an idea of what to do.

> [@Receive Buffer Size Warning at Startup](https://community.graylog.org/t/receive-buffer-size-warning-at-startup/3592/2):
>
> If you don’t have any problems with oversized UDP packets or dropped messages, you can ignore the warning. Otherwise you might want to tune your operating system settings regarding UDP receive buffer sizes. Also see the following related GitHub issue: [https://github.com/Graylog2/documentation/issues/26](https://github.com/Graylog2/documentation/issues/26)

This is only a suggestion  
If the above post doesnt work for you then on your OS you could inspect maximum socket buffer size for SO\_RCVBUF (receive, rmem\_max) and SO\_SNDBUF (send, wmem\_max).

`[root@graylog-server~] sysctl --all --pattern "net.core.[rw]mem_max"`

```auto
net.core.rmem_max = 212992
net.core.wmem_max = 212992

```

> [@colttt](#):
>
> should be 425985 but is 425984.

Update maximum socket receive buffer size.

`[root@graylog-server~] sudo sysctl --write net.core.rmem_max=425985`  
`net.core.rmem_max = 425985`

Restart graylog-server service.

`[root@graylog-server~] systemctl restart graylog-server`

NOTE: If it doesnt work you can reset it back.

As for…

> [@colttt](#):
>
> ERROR [CsvConverter] Different number of columns in CSV data (5) and configured field names (6). Discarding input.

I’m not sure, maybe someone else might know here.

Hope that helps

---

_[View the full topic](https://community.graylog.org/t/ip-address-in-graylog-server-log/20642)._