We have just managed to bring up a working configuration of Graylog, followed the recipe to send windows logs, configured log output to 192.168.1.aa , port 5514, UDP, configured and started the receiver.
Graylog is not seeing any messages.
Running netstat -peanut shows port 5514 is listening.
Running tshark show UDP traffic coming in to port 5514
No events are shown in Graylog - I can’t think of anything else to check right now