# Send data with rsyslog

**URL:** <https://community.graylog.org/t/send-data-with-rsyslog/11468>\
**Category:** Graylog Central (peer support)\
**Created:** [August 5, 2019, 1:36pm UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468 "2019-08-05T13:36:18Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![khadimFall](https://avatars.discourse-cdn.com/v4/letter/k/8e7dd6/32.png) [@khadimFall](https://community.graylog.org/u/khadimFall)\
**Post date:** [August 5, 2019, 1:36pm UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/1 "2019-08-05T13:36:18Z")

</div>

hello,

i configure my graylog server but i cant see the data sending with rsyslog  
someone can help me please?

---

<div class="post-metadata">

**Author:** ![Zipslack](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/zipslack/32/3274_2.png) [@Zipslack](https://community.graylog.org/u/Zipslack)\
**Post date:** [August 5, 2019, 2:17pm UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/2 "2019-08-05T14:17:07Z")

</div>

Hi,

is there an input configured for receiving syslog messages? Is your syslog server configured to send data to the Graylog server? Is the Syslog server able to reach the Graylog server and the configured port?

Or: what have you already tried to make it work? Please be more verbose and tell us about what you’ve already done.

---

<div class="post-metadata">

**Author:** ![khadimFall](https://avatars.discourse-cdn.com/v4/letter/k/8e7dd6/32.png) [@khadimFall](https://community.graylog.org/u/khadimFall)\
**Post date:** [August 5, 2019, 11:20pm UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/3 "2019-08-05T23:20:30Z")

</div>

Hi  
I followed the configuration proposed by the website.  
the server works because I saw the home page of the site but when I do an input I see no message.  
The syslog server is configured

---

<div class="post-metadata">

**Author:** ![khadimFall](https://avatars.discourse-cdn.com/v4/letter/k/8e7dd6/32.png) [@khadimFall](https://community.graylog.org/u/khadimFall)\
**Post date:** [August 5, 2019, 11:21pm UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/4 "2019-08-05T23:21:52Z")

</div>

Do you speak French ?

---

<div class="post-metadata">

**Author:** ![jns](https://avatars.discourse-cdn.com/v4/letter/j/a6a055/32.png) [@jns](https://community.graylog.org/u/jns)\
**Post date:** [August 7, 2019, 5:17am UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/5 "2019-08-07T05:17:51Z")

</div>

Hey,

1. was an input created and is it running? Has the correct transmission protocol been selected? Does the port match the one from rsyslog Conf?

2. can you ping the terminal on your server to the server that should send the logs? Can the other server reach your Graylog server via ping? Are the firewalls active on your systems?

3. what does your rsyslog Conf look like? Is it the same protocol and port as the input? Did you restart the service after the Conf change?

Cheers Jonas

---

<div class="post-metadata">

**Author:** ![khadimFall](https://avatars.discourse-cdn.com/v4/letter/k/8e7dd6/32.png) [@khadimFall](https://community.graylog.org/u/khadimFall)\
**Post date:** [August 7, 2019, 8:40am UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/6 "2019-08-07T08:40:11Z")

</div>

hi

1. an input is created and it is reunning. yes for the test i create a syslog udp and it’s running wel but i can’t send data on my graylog server from syslog. yes i configured syslog in order to receive a udp protocol

2. syslog and graylog are on the same server but i created a client to test my conf and i can ping my server . no we have not a firewalls active

3. you can see i do only thi configuration

# provides UDP syslog reception

module(load=“imudp”)  
input(type=“imudp” port=“1514”)

# provides TCP syslog reception

module(load=“imtcp”)  
input(type=“imtcp” port=“1514”)  
yes iyes it’s the same port i started also.

and i have the error

### An input has failed to start (triggered in 2 hours)

Input 5d4a922579b826279b7aef0b has failed to start on node 5a07d5ef-bb08-4f88-8519-20ba945fe886 for this reason: »bind(…) failed: Adresse déjà utilisée.«. This means that you are unable to receive any messages from this input. This is mostly an indication for a misconfiguration or an error.

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [August 20, 2019, 9:39am UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/7 "2019-08-20T09:39:16Z")

</div>

I guess you have a misunderstanding …

The Input needs to be created in the Graylog UI and not on the Syslog server that is running on the same Server that Graylog is running on. As no the same services are able to use the same port you get the error in Graylog.

You might want to check the Getting started guide: [http://docs.graylog.org/en/3.1/pages/getting\_started.html](http://docs.graylog.org/en/3.1/pages/getting_started.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 3, 2019, 9:45am UTC](https://community.graylog.org/t/send-data-with-rsyslog/11468/8 "2019-09-03T09:45:22Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
