Symantec messages not getting through

Graylog Central (peer support)
1

So my server administrators are sending their Symantec Endpoint Manager logs to my new Graylog 5 server but I’m not seeing them. On the old Graylog 4 server, no issue.

I can see the syslogs coming in via tcpdump and other services are sending data to that input with no issue.

sepm
sepm1715×455 21.6 KB

syslog
syslog588×857 43.3 KB

2

Hey @giveen

Have you tried Raw/Plain text input to see if that works?

3

That worked, which was odd, because it didnt have to do that on the old version, but whatever.

1 Like
4

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.