Permissions error when creating Syslog UDP input

[kurtehland]

I get an error when I try to create a Syslog UDP input. I can’t find any other program that is using the port. I’ve created a Plaintext UDP input on another port and it works fine. Here’s what I see in the server.log:

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
at java.lang.Thread.run(Unknown Source) [?:?]
Caused by: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Permission denied
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:136) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?]
… 7 more
Caused by: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Permission denied
2023-04-20T12:33:57.980-04:00 WARN [UdpTransport] Failed to start channel for input SyslogUDPInput{title=Syslog UDP, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=null}
io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Permission denied
2023-04-20T12:33:57.987-04:00 INFO [InputStateListener] Input [Syslog UDP/64416975303ad23fc281993c] is now FAILED

[Wine_Merchant]

Hey @kurtehland,

Specifically what port? Try using the below to see if the port is in use elsewhere but alter 9000 to said port.

sudo ss -nap |grep 9000

sudo lsof -i | grep 9000

[kurtehland]

Port 514. I tried your command but didn’t get any results.

[Joel_Duffield]

Ports below 1024 are protected, thus the permission denied error. There are ways around this depending on your linux flavour, but i just stick to ports above 1024 like 1514. If you cannot change the port on the source side, you could also use a firewall rule in the OS to redirect 514 to 1514 etc.