Note that “@x.x.x.x” uses UDP, not TCP. If you want TCP use “@@x.x.x.x”
Regards, > On Aug 16, 2023, at 12:00, Mariusz Kruk via rsyslog > <rsyslog@lists.adiscon.com> wrote: > > Also be sure that you're not stopping processing your event before it reaches > the forwarding entry. > > As David wrote - it's hard to debug a config if you don't see it as a whole. > > On 16.08.2023 18:15, David Lang via rsyslog wrote: >> please post your full config. >> >> I would also check your firewall config (iptables/nftables) on the system to >> see if it's blocking the connection. >> >> Also make sure you have a route to the destination IP (you probably have a >> default route that does this, but it is something we've run across) >> >> are you seeing any startup errors? or config errors (start rsyslog manually >> with rsyslogd -N1 >> >> if none of that helps, we may need to get debug info, but start with the >> simpler stuff. Normally this 'just works' so I'd guess that it's a syntax >> error somewhere in the config. >> >> David Lang >> >> On Wed, 16 Aug 2023, kathy lyons via rsyslog wrote: >> >>> I hope this is the right place to ask this question. I have a basic >>> rsyslog setup sending udp data from a Debian 11 host to a remote server. >>> At the bottom of my rsyslog.conf file I have: >>> >>> *.* @x.x.x.x >>> >>> Logs are being sent to /var/log/daemon.log, /var/log/syslog, etc. so I am >>> not worried about that. The problem is that on the device itself I do not >>> see any logs leaving the device. Nor do I see them at the firewall >>> (x.x.x.x). I have used netcat to see if the remote port is open and >>> reachable and it is. I have re-install rsyslog and restarted it. Nothing >>> seems to work. >>> >>> However, when I issue the logger command: >>> >>> logger -n x.x.x.x -P 514 -d "This is a test" >>> >>> I see that data. What else can I check with my rsyslog setup? Thank you. >>> _______________________________________________ >>> rsyslog mailing list >>> https://lists.adiscon.net/mailman/listinfo/rsyslog >>> http://www.rsyslog.com/professional-services/ >>> What's up with rsyslog? Follow https://twitter.com/rgerhards >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >>> LIKE THAT. >>> >> _______________________________________________ >> rsyslog mailing list >> https://lists.adiscon.net/mailman/listinfo/rsyslog >> http://www.rsyslog.com/professional-services/ >> What's up with rsyslog? Follow https://twitter.com/rgerhards >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of >> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T >> LIKE THAT. > _______________________________________________ > rsyslog mailing list > https://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of > sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T > LIKE THAT. _______________________________________________ rsyslog mailing list https://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
