Output not sending anything

From this drop down menu option on the streams outputs … i have tried multiple of the options.

I see, what about this statement

I assume you didn’t see this in the documentation

The Forwarder connects to Graylog Cloud over TLS. Using TLS is also highly recommended for on-premise installations.

Not sure how your using UDP. Can you explain?

Is not the simple forwarder output standard UDP syslog?
Also The tLS is not a required field and UDP doesn’t use TLS.
It comes down to this is there no standard udp syslog output method?

Im confused to your statement

Can you explain?

OK, my assumption to date is that the default forwarder is using simple UDP syslog. I understand this may be mistaken, but that is the distinction.
If it didn’t specifically say TCP, i assumed it was UDP.
So the “Forwarder Output” i assumed to be UDP, whereas the “TCP Syslog” output i assumed to be TCP, otherwise why the distinction?
Are they all TCP only? Perhaps this is my confusion.

Hello,

This is probably your issue.

with all respect i dont think it is.
Again, it says “recommended” it doesnt say its required and it isn’t a required field.
Also I’m not trying to connect to the graylog cloud, but to another host on the same segment.
Is standard syslog under UDP not an option?

Then this would be what your issue is.

Ill break it down for you.

You cant use a forwarder to send logs to your Siem device UNLESS you have a forwarder INPUT on your siems device, Please read the documentation for better understanding

This is shown here…

AND here…

https://docs.graylog.org/docs/forwarder

You may need to scroll down the page to see more details about Forwarders.

My apologies, At this point I’m not able to help you further, perhaps someone can jump in to assist you

i DO have an input on that device, it runs a standard syslog server.
I have read the material multiple times trying to see what i have missed.
Thank you for your efforts but yes, perhaps someone else.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.