Trying to add Aruba Switch getting failed

sunil.balram · June 26, 2023, 8:02am

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.

WARN [UdpTransport] Failed to start channel for input SyslogUDPInput{title=Blr-HO4-SW, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=a8f30455-e9ab-426d-8d67-33310c0738ac}
io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T13:30:47.940+05:30 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID <649945aa22d1a249eca0e01f> misfired. Reason: bind(…) failed: Cannot assign requested address.
org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:161) ~[graylog.jar:?]
at org.graylog2.shared.inputs.InputLauncher$1.run(InputLauncher.java:88) [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) [?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?]
at java.lang.Thread.run(Thread.java:829) [?:?]
Caused by: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:136) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?]
… 7 more
Caused by: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T13:30:47.945+05:30 INFO [InputStateListener] Input [Syslog UDP/649945aa22d1a249eca0e01f] is now FAILED

Aruba 2930 F

Checked with UDP default (514) and 1514 udp port number

Need Support in resolving this error

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

H077E · June 26, 2023, 12:03pm

Welcome @sunil.balram
Is the INPUT port already in use by another service?

try shell commands and check it:
ss -tunl
or
netstat -tupln
or
lsof -i -n

… and I assume that the configured IP address is correct!?

sunil.balram · June 26, 2023, 12:18pm

Hi No the input port is not Here is the ouput of netstat -tupln
Active Internet connections Proto Recv-Q Send-Q Local Address tcp 0 0 127.0.0.1:27017 tcp 0 0 127.0.0.53:53 tcp 0 0 0.0.0.0:514 tcp 0 0 0.0.0.0:22 tcp 0 0 127.0.0.1:631 tcp6 0 0 192.168.103.58:9000 tcp6 0 0 :::514 tcp6 0 0 :::22 tcp6 0 0 127.0.0.1:9200 tcp6 0 0 ::1:9300 tcp6 0 0 ::1:9200 tcp6 0 0 127.0.0.1:9300 tcp6 0 0 ::1:631 udp 0 0 0.0.0.0:5353 udp 0 0 0.0.0.0:52921 udp 0 0 127.0.0.53:53 udp 0 0 0.0.0.0:514 udp 0 0 0.0.0.0:631 udp6 0 0 :::5353 udp6 0 0 :::33113 udp6 0 0 :::514 href="/u/h077e">@H077E
used by any Services.
(only servers)
Foreign Address State PID/Program name
0.0.0.0:* LISTEN -
0.0.0.0:* LISTEN -
0.0.0.0:* LISTEN -
0.0.0.0:* LISTEN -
0.0.0.0:* LISTEN -
:::* LISTEN -
:::* LISTEN -
:::* LISTEN -
:::* LISTEN -
:::* LISTEN -
:::* LISTEN -
:::* LISTEN -
:::* LISTEN -
0.0.0.0:* -
0.0.0.0:* -
0.0.0.0:* -
0.0.0.0:* -
0.0.0.0:* -
:::* -
:::* -
:::* -

Yes, the Ip address is correct…if i am using the TCP protocol with same IP addr it is working fine.

H077E · June 26, 2023, 12:35pm

thx.
Can you please set another high port and try it? e.g. UDP/5555 and remove the INPUT settings with udp/514 + tcp/514 from GL.

sunil.balram · June 26, 2023, 12:43pm

Hi @H077E
Changed the Port but getting the same error.

2023-06-26T18:12:31.156+05:30 WARN [UdpTransport] Failed to start channel for input SyslogUDPInput{title=Blr-HO4-SW, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=a8f30455-e9ab-426d-8d67-33310c0738ac}
io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T18:12:31.159+05:30 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID <6499878322d1a249eca1278d> misfired. Reason: bind(…) failed: Cannot assign requested address.
org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:161) ~[graylog.jar:?]
at org.graylog2.shared.inputs.InputLauncher$1.run(InputLauncher.java:88) [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) [?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?]
at java.lang.Thread.run(Thread.java:829) [?:?]
Caused by: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:136) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?]
… 7 more
Caused by: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T18:12:31.161+05:30 INFO [InputStateListener] Input [Syslog UDP/6499878322d1a249eca1278d] is now FAILED

H077E · June 26, 2023, 12:52pm

Please take a screenshot of your INPUT configuration screen

sunil.balram · June 27, 2023, 6:46am

Attached Screen shot

H077E · June 27, 2023, 9:13am

It looks good.
The IP 192.168.103.1 is the ip address of the Graylog network device?
For a test: set it to 0.0.0.0. The INPUT listens on all interfaces.

Otherwise, You can use netcat to try whether the port can be integrated without GL. You should then be able to see logs from the switch on the shell.

nc -u -l 5555

sunil.balram · June 27, 2023, 10:29am

The IP address 192.168.103.1 belongs to the Network device.

H077E · June 27, 2023, 11:24am

Do you mean the Aruba switch? Then that’s wrong there. This is where the bind ip address goes if GL has multiple NICs. Set it to “0.0.0.0”

sunil.balram · June 30, 2023, 8:54am

@H077E GL has only one NIC card.
Should i need to set the IP address"0.0.0.0"

H077E · June 30, 2023, 2:32pm

Yes, please.
The INPUT listens to all interfaces on the GL.

system · July 14, 2023, 2:32pm

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Firewall Logs creation Failed Graylog Central (peer support)	3	1609	December 12, 2019
Graylog Cisco Switch Input Failed Graylog Central (peer support)	9	2979	February 17, 2020
Syslog UDP FAILED Graylog Central (peer support)	12	753	September 8, 2023
Fail to create second syslog udp input Graylog Central (peer support)	3	560	May 27, 2019
Files to bind to: /0.0.0.0:514 Graylog Central (peer support)	3	8506	April 11, 2019

Trying to add Aruba Switch getting failed

Related topics