I have several servers that send rsyslog and apache data to a Graylog server. I recently launched a server to learn about mail servers using Mail-In-A-Box using a Digital Ocean droplet.
On all my servers I have a .conf file in my rsyslog.d folder with the following entry:
This works and my Graylog server is getting all the logs that I need. However, my new server running Ubuntu Server 18.04.05 with all updated packages isn’t sending those logs.
I’ve ensure that port 1514 udp and tcp are open on both servers. I’ve also used grep on both my journalctl and syslog for the IP address and I just don’t see anything.
I just can’t figure out why this new server isn’t sending in the logs and I’m a little fuzzy on how to troubleshoot beyond what I have above. Any ideas?