Hi, Thanks for your answer.
Graylog VM Server 10.10.10.1/24 <=> Syslog Client (My Cisco Router) 10.10.10.2/24. Like this I receive the syslog messages under the web interface. When I change the source IP address of my syslog client messages, I don t see them although they arrived on the physical interface of the Graylog server. root@graylog-beta:/opt/graylog/conf# tcpdump -n -i eth1 IP 10.10.10.2.53192 > 10.10.10.1.514: SYSLOG local7.notice, length: 80 => OK. All is OK root@graylog-beta:/opt/graylog/conf# tcpdump -n -i eth1 192.168.255.1.61543 > 10.10.10.1.5140: UDP, length 80 => I don't see syslog message under the web interface Have got an idea ?? Thanks in advance. Thomas -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f978e42d-4bca-4759-8e3c-daf8471f7a41%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.