Hi Jochen,
Thanks! Changed user to root, restarted server, and the input is starting
ok now.
However, when I send test messages to the input, I don't see anything in
input/search window.
In the log, I see this:
2017-01-22T21:05:47.002+08:00 WARN [NettyTransport] receiveBufferSize
(SO_RCVBUF) for input SyslogUDPInput{title=diskstation,
type=org.graylog2.inputs.syslog.udp.SyslogUDPInput, nodeId=null} should be
262144 but is 212992.
I have two choices on my syslog sender: BSD (RFC3164) and IETF (RFC
5424). I've tried both just to be sure, but no additional error messages
nor message show up in GrayLog.
Any suggestion?
Thanks!
On Fri, Jan 20, 2017 at 5:47 PM, Jochen Schalanda <joc...@graylog.com>
wrote:
> Hi Jason,
>
> you're trying to bind the input to a privileged port (<1024) which is only
> possible if Graylog was started by the system's root user or was configured
> accordingly (e. g. with authbind).
>
> See http://docs.graylog.org/en/2.1/pages/faq.html#how-can-
> i-start-an-input-on-a-port-below-1024 for details.
>
> Cheers,
> Jochen
>
> On Friday, 20 January 2017 10:43:08 UTC+1, JayJay wrote:
>>
>> Hi Richard,
>>
>> - allow_override_date:
>> true
>> - bind_address:
>> 10.10.0.64 <---- I also tried 0.0.0.0 and 127.0.0.l
>> - expand_structured_data:
>> true
>> - force_rdns:
>> true
>> - override_source:
>> *<empty>*
>> - port:
>> 514
>> - recv_buffer_size:
>> 262144
>> - store_full_message:
>> true
>>
>> --
> You received this message because you are subscribed to a topic in the
> Google Groups "Graylog Users" group.
> To unsubscribe from this topic, visit https://groups.google.com/d/
> topic/graylog2/1MF1mFj6EhQ/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> graylog2+unsubscr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/3174ef87-bd92-4cfc-9a50-9b17a268a0bf%40googlegroups.com
> <https://groups.google.com/d/msgid/graylog2/3174ef87-bd92-4cfc-9a50-9b17a268a0bf%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/CAGUPOFsXPsQ5roE0-k7tGDnooxDUgxPtxWOb3Mu90NRuMTxKsw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
