Syslog Input Problem with other Clients and Questions

[DerPi3141]

Hello Guys,

I’m new in Graylog. I have installed the Graylog Server on Ubuntu 20.04 LTS.
After installing Graylog i tried to collect Logs from external Client Over WAN.

When i tried collecting logs from other Client over the Internet i cant see any Logs from them.

But from the Graylog machine itself and the Firewall it works.

My Input Config:

SYLOG
1415 /udp

Firewall:
Forwarding 1415/udp to Graylog Server

The second question is: HowTo configure Syslog to use TLS?

kind regards

[ttsandrew (Andrew)]

Hey @DerPi3141, welcome!

When you say you’re trying to collect logs, do you mean that you’ve configured a client to send logs to your Graylog server? Is your Graylog server listening directly on the internet? Can you give us a more detailed explanation of the topology?

As for enabling TLS, first you’ll need to be using TCP inputs and the clients will need to be configured to send over TCP.

The Graylog documentation has information on securing Graylog, including configuring HTTPS and TLS.

https://docs.graylog.org/en/4.0/pages/secure/securing.html

HTTPS: Using HTTPS — Graylog 4.0.0 documentation
Since you’re using syslog, including some information on TLS with these inputs and client configs: Ingest syslog — Graylog 4.0.0 documentation