Issues with remote sources

[rosh]

I have local sources running, but that obviously doesn’t help that much. I have a remote source generating the following messages. Not sure exactly what’s going on.

 Msg: Jun  3 16:42:00 san syslog-ng[5645]: Syslog connection broken; fd='4', server='AF_INET(10.10.20.23:514)', time_reopen='60'\0x0a
16:43:00.015397 IP (tos 0x0, ttl 64, id 10922, offset 0, flags [none], proto UDP (17), length 144)
    RemoteHost.syslog > graylog.local.syslog: SYSLOG, length: 116
        Facility console (14), Severity info (6)
        Msg: Jun  3 16:42:00 san syslog-ng[5645]: I/O error occurred while writing; fd='4', error='Connection refused (61)'\0x0a
16:43:00.015402 IP (tos 0x0, ttl 64, id 10923, offset 0, flags [none], proto UDP (17), length 142)

[jochen]

Your syslog-ng is unable to reach the Syslog input in Graylog.

Maybe the input isn’t running or the input is configured incorrectly or there’s a packet filter blocking access or […]