I have created an output with the following config:
I assign this output to the ‘All Messages’ stream and have an input on another instance of Graylog with the following config:
I see no active connections on the receiving graylog instance, I also have run tcmdump on the receiving box and can’t see any inbound traffic over that port. I have run tcpdump on the sending box only looking at the source IP of the sending box and the destination of the receiving box and see no traffic.
I believed this was a firewall issue, so I tried telnet from the sending box to the receiving box on port 22001 and it connects immediately and I see 1 active connection in the graylog input page, so firewalls don’t seem to be an issue.
Both on Ubuntu 16.04.LTS and both running graylog 2.2.3. are there any known issues with this version of graylog?