Graylog: Troubleshooting: a Graylog input doesn't work

This documentation is part of the Configure inputs guide. You can view the complete guide here: How to configure Graylog inputs.

👋 Welcome to the Stackhero documentation!

Stackhero offers a ready-to-use Graylog cloud solution that provides a host of benefits, including:

• Unlimited and dedicated SMTP email server included.
• Effortless updates with just a click.
• Customizable domain name secured with HTTPS (for example, https://logs.your-company.com).
• Optimal performance and robust security powered by a private and dedicated VM.

Save time and simplify your life: it only takes 5 minutes to try Stackhero's Graylog cloud hosting solution!

If a Graylog input is not working as expected, check the following points:

1. On the Graylog web UI:

   1. Go to System then Inputs and confirm that the input is running.
   2. Verify that the protocol (UDP or TCP) is correct.
   3. If you are using TCP, make sure that tls_enable is set to false since encryption is managed on the Stackhero dashboard.
   4. Confirm that the port is correct.
   5. Verify that the data format is correct (GELF, CEF, RAW, or Syslog).

2. On the Stackhero dashboard:

   1. Select your Graylog instance and click the Configure button.
   2. In the Input ports list, ensure that the port is defined with the appropriate protocol (UDP or TCP).
   3. If you are using TCP, check that the TLS option is enabled for encryption (SSL/HTTPS).

3. On the firewall:

   1. In the Stackhero dashboard, select your Graylog instance and click on the Firewall tab.
   2. Ensure there is a rule accepting traffic for the input port and protocol. If you want to allow any IP, set the IP field to 0.0.0.0/0.

By following this checklist, your input should work properly.