syslogrsysloggraylog2grayloggraylog3

Graylog not showing logs or messages from client


Hell There,

I am new to graylog, we have configured client with below entry in configuration file

*.* @1*.**.88.**:514;RSYSLOG_SyslogProtocol23Format (we are using 514 port)

even we tried to to send some logs to graylog server with

echo -n -e '{ "version": "1.1", "host": "example.org", "short_message": "A short message", "level": 5, "_some_info": "foo" }'"\0" | nc -w 3 10.**.88.** 30001

tcpdump -vvv -i any port 514 |grep TCP
tcpdump -vvv -i any port 514|grep UDP

but in GUI we are not able to see any messages from that client, can you all please help us what we are missing since we dont have any idea of graylog. our version is Graylog v3.3.8+

Regards,

Samurai


Solution

  • Ports under 1024 are reserved. Switch your input to use 1514 instead and it should work.