Re: [rsyslog] rsyslog is not storing logs coming from specific device

Mariusz Kruk wrote: 1. Do those log end up _somewhere_? (some default destination) If you can find them anywhere, log them with the template RSYSLOG_DebugFormat so you can see how they are parsed, usually the problem is that they aren't being parsed as you expect them to be. 2. Are you sur

Re: [rsyslog] rsyslog is not storing logs coming from specific device

1. Do those log end up _somewhere_? (some default destination) 2. Are you sure that rsyslog actually gets those events? (tcpdump can still show UDP packets on the wire even if they are filtered out by local firewall (or rp_filter assuming you're running linux)). 3. I'm not familiar with the q

[rsyslog] rsyslog is not storing logs coming from specific device

Hi Team, I've been using rsyslog extensively for our daily operations, but today I ran into an issue where the rsyslog template is not getting applied to logs from specific devices. I verified that logs are received from these devices using tcpdump, and I created a basic template to store logs