Use tcpdump to collect packets arriving at the host and see if they're showing up or not. If not, verify the clients can ping the graylog server, and that the server doesn't have a firewall running that's blocking packets from those clients, and that there isn't a firewall between the clients and that server.
Verify the clients are sending on the ports you think they are, and that the graylog server is actually listening on that port. (Debian/ubuntu flavors run as a non-priv user and so can't listen on the standard port 514 without help or redirects.) On Tue, Mar 15, 2016 at 12:44 PM, Chris Lajoie <[email protected]> wrote: > Hi, I am using the UDP syslog input and I am trying to figure out why > messages from certain hosts are not showing up in graylog. The hosts that > *do* work are all of my centos7 servers... everything else is missing (like > firewalls, XenServer hosts, PDUs, others). Graylog isn't indicating any > kind of error or failure to parse, from what I can tell. Anyone have any > suggestions on how I can go about debugging this? > > Graylog 1.3.3 > MongoDB 3.2.4 > Elasticsearch 1.7.2 > > Thanks, > > Chris > > -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/36fa9c63-d4b5-4ba4-8490-3e73dae3973e%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/36fa9c63-d4b5-4ba4-8490-3e73dae3973e%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- No matter what we think of Linux versus FreeBSD, etc., the one thing I really like about Linux is that it has Microsoft worried. Anything that kicks a monopoly in the pants has got to be good for something. - Chris Johnson -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAL5rfGU-kauG0n7s3cLM-yNzT%3Dm02_V_wqe5xMJz9A-QDm9_9g%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
