i’ve installed graylog-server on a debian server following this documentation:
i’ve configure a syslog input udp(port 1514) and configure a fw, a switch and another Linux host to send log to syslog-server (to the default 514 port). with tcpdump, i can see that log reach the server on port 514(udp) and when i check the iptables rules stats, the stats of the redirection to port 1514 increase. But nothing reach the input.
Help needed please, don’t know where to begin to find where is the problem.