Hi Sanhegi, do you see any errors in the nxlog_stdout/stderr files under /var/log/graylog/collector-sidecar? It could be that you started nxlog on port 514 and there is another syslog already listening or something like that? Are you sure that the firewall syslog messages can be processed by nxlog, sometime firewalls send non standard syslog that fails at some point of the logging pipeline.
Cheers, Marius On 30 May 2016 at 10:44, sangh <sanhegi.ma...@gmail.com> wrote: > Hi, i didn't want to use a file as input. When i choose udp as input in > the graylog web interface, i supposed i will get all the udp log from > 0.0.0.0 > > Le lundi 30 mai 2016 10:22:07 UTC+2, Jochen Schalanda a écrit : >> >> Hi, >> >> the firewall logs are probably written to a different file. nxlog simply >> follows text files and sends their contents to Graylog, so you need to add >> the log file containing the firewall logs to the nxlog configuration. >> >> Cheers, >> Jochen >> >> On Monday, 30 May 2016 09:55:36 UTC+2, sangh wrote: >>> >>> the log of the firewall i send them to Machine A. >>> I install on Machine A nxlog and collector side car >>> On graylog Web interface, i configure input so i can get log of >>> 0.0.0.0. However i don't receive the firewall log on the graylog server >>> i do receive them on machine A but they are not sent to graylog server. >>> >> -- > You received this message because you are subscribed to the Google Groups > "Graylog Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to graylog2+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/6a896da7-5a48-4de9-91f0-01a5e421dbc7%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/6a896da7-5a48-4de9-91f0-01a5e421dbc7%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- Developer Tel.: +49 (0)40 609 452 077 Fax.: +49 (0)40 609 452 078 TORCH GmbH - A Graylog Company Poolstraße 21 20335 Hamburg Germany https://www.graylog.com <https://www.torch.sh/> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 Geschäftsführer: Lennart Koopmann (CEO) -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAMqbBbLXTJLADPLVs3KLW_NhYTMAHeAktS4nnO8%2BBLgFhQ1C6g%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
