Trying to add Aruba Switch getting failed

Graylog Central (peer support)
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.

WARN [UdpTransport] Failed to start channel for input SyslogUDPInput{title=Blr-HO4-SW, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=a8f30455-e9ab-426d-8d67-33310c0738ac}
io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T13:30:47.940+05:30 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID <649945aa22d1a249eca0e01f> misfired. Reason: bind(…) failed: Cannot assign requested address.
org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:161) ~[graylog.jar:?]
at org.graylog2.shared.inputs.InputLauncher$1.run(InputLauncher.java:88) [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) [?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?]
at java.lang.Thread.run(Thread.java:829) [?:?]
Caused by: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:136) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?]
… 7 more
Caused by: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T13:30:47.945+05:30 INFO [InputStateListener] Input [Syslog UDP/649945aa22d1a249eca0e01f] is now FAILED

Aruba 2930 F

Checked with UDP default (514) and 1514 udp port number

Need Support in resolving this error

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

Welcome @sunil.balram
Is the INPUT port already in use by another service?

try shell commands and check it:
ss -tunl
or
netstat -tupln
or
lsof -i -n

… and I assume that the configured IP address is correct!?

3

Hi @H077E
Thanks for the response.
No the input port is not used by any Services.
Here is the ouput of netstat -tupln
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:514 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN -
tcp6 0 0 192.168.103.58:9000 :::* LISTEN -
tcp6 0 0 :::514 :::* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
tcp6 0 0 127.0.0.1:9200 :::* LISTEN -
tcp6 0 0 ::1:9300 :::* LISTEN -
tcp6 0 0 ::1:9200 :::* LISTEN -
tcp6 0 0 127.0.0.1:9300 :::* LISTEN -
tcp6 0 0 ::1:631 :::* LISTEN -
udp 0 0 0.0.0.0:5353 0.0.0.0:* -
udp 0 0 0.0.0.0:52921 0.0.0.0:* -
udp 0 0 127.0.0.53:53 0.0.0.0:* -
udp 0 0 0.0.0.0:514 0.0.0.0:* -
udp 0 0 0.0.0.0:631 0.0.0.0:* -
udp6 0 0 :::5353 :::* -
udp6 0 0 :::33113 :::* -
udp6 0 0 :::514 :::* -

Yes, the Ip address is correct…if i am using the TCP protocol with same IP addr it is working fine.

4

thx.
Can you please set another high port and try it? e.g. UDP/5555 and remove the INPUT settings with udp/514 + tcp/514 from GL.

5

Hi @H077E
Changed the Port but getting the same error.

2023-06-26T18:12:31.156+05:30 WARN [UdpTransport] Failed to start channel for input SyslogUDPInput{title=Blr-HO4-SW, type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=a8f30455-e9ab-426d-8d67-33310c0738ac}
io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T18:12:31.159+05:30 ERROR [InputLauncher] The [org.graylog2.inputs.syslog.udp.SyslogUDPInput] input with ID <6499878322d1a249eca1278d> misfired. Reason: bind(…) failed: Cannot assign requested address.
org.graylog2.plugin.inputs.MisfireException: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:161) ~[graylog.jar:?]
at org.graylog2.shared.inputs.InputLauncher$1.run(InputLauncher.java:88) [graylog.jar:?]
at com.codahale.metrics.InstrumentedExecutorService$InstrumentedRunnable.run(InstrumentedExecutorService.java:180) [graylog.jar:?]
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) [?:?]
at java.util.concurrent.FutureTask.run(FutureTask.java:264) [?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?]
at java.lang.Thread.run(Thread.java:829) [?:?]
Caused by: org.graylog2.plugin.inputs.MisfireException: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
at org.graylog2.inputs.transports.UdpTransport.launch(UdpTransport.java:136) ~[graylog.jar:?]
at org.graylog2.plugin.inputs.MessageInput.launch(MessageInput.java:158) ~[graylog.jar:?]
… 7 more
Caused by: io.netty.channel.unix.Errors$NativeIoException: bind(…) failed: Cannot assign requested address
2023-06-26T18:12:31.161+05:30 INFO [InputStateListener] Input [Syslog UDP/6499878322d1a249eca1278d] is now FAILED

6

Please take a screenshot of your INPUT configuration screen

7

Graylog
Graylog972×601 55.1 KB

Attached Screen shot

8

It looks good.
The IP 192.168.103.1 is the ip address of the Graylog network device?
For a test: set it to 0.0.0.0. The INPUT listens on all interfaces.

Otherwise, You can use netcat to try whether the port can be integrated without GL. You should then be able to see logs from the switch on the shell.

nc -u -l 5555
9

The IP address 192.168.103.1 belongs to the Network device.

10

Do you mean the Aruba switch? Then that’s wrong there. This is where the bind ip address goes if GL has multiple NICs. Set it to “0.0.0.0”

1 Like
11

@H077E GL has only one NIC card.
Should i need to set the IP address"0.0.0.0"

12

Yes, please.
The INPUT listens to all interfaces on the GL.

13

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.