I’m new in Graylog. I have installed the Graylog Server on Ubuntu 20.04 LTS.
After installing Graylog i tried to collect Logs from external Client Over WAN.
When i tried collecting logs from other Client over the Internet i cant see any Logs from them.
But from the Graylog machine itself and the Firewall it works.
My Input Config:
SYLOG
1415 /udp
Firewall:
Forwarding 1415/udp to Graylog Server
The second question is: HowTo configure Syslog to use TLS?
When you say you’re trying to collect logs, do you mean that you’ve configured a client to send logs to your Graylog server? Is your Graylog server listening directly on the internet? Can you give us a more detailed explanation of the topology?
As for enabling TLS, first you’ll need to be using TCP inputs and the clients will need to be configured to send over TCP.
The Graylog documentation has information on securing Graylog, including configuring HTTPS and TLS.