Traffic from other subnet

I have sent syslog (UDP) from some servers on different subnet. I saw all traffic arrived on the graylog cluster but not processed (msg in/out=0/0).
The graylog version is 2.3.
Anyone can help me?

Thank you.


Please provide more details about your setup such as the network setup, the configuration of the Syslog UDP input in Graylog, and the configuration of the syslog daemons sending messages to Graylog.

Also make sure that no firewalls are blocking UDP packets to the Syslog UDP input.

I found the root cause . I have put the parameter rp_filter to 2. It’s working now.
Thank you.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.