Hi Dirk, The source host is running a Centos 5.11 with rsyslog 3.22.1-7.el5 > configured to remote log to a Graylog2 server TCP syslog port 514. >
Is Graylog2 really listening on port 514/tcp? You can check this with `lsof -i :514` or `netstat -tplen | grep :514`. The problem is, that Graylog2 does not seem to accept this. I cannot see > the source host within sources list on Graylog2 web interface or any search > result. > I started the graylog2 daemon in debug mode and "greped" for the source > host name and ip and error messages but I could not find anything that lets > me know that graylog is even receiving packages from that host. > If the message has been received by Graylog2 you should see DEBUG messages from SyslogTCPInput and SyslogProcessor in the log output of Graylog2 (if it was started with the --debug switch). Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
