the point in this, you did not described properly what you have done. You are working with the spare time of people. So that is the reason for this posting:
I personal would - as written - create a RAW input now and use that as target of your router to check if that reached Graylog.