[syslog-ng] Unable to make syslog-ng listen to port 514

[Scheidler, Balázs]

The "permission denied" errno for a connect() call most probably relates to
an LSM, probably SELinux that denies the outgoing connection. Check you
selinux related log messages.

On Mon, Nov 5, 2018 at 6:09 PM Rodney Bizzell <hardworker30 at gmail.com>
wrote:

> Ok sure thanks I will show my config
>
> On Mon, Nov 5, 2018, 12:01 PM Szemere, László <
> laszlo.szemere at oneidentity.com wrote:
>
>> Hello,
>>  please share
>>  - your rconfiguration
>>  - the command you started syslog-ng with
>>  - the user you are running syslog-ng on behalf.
>>
>> The Permission denied error message indicates, that you are trying to
>> bind to a local address and port, which you do not have permission to use.
>>
>> Br,
>> Laci
>>
>>
>>
>> On Mon, Nov 5, 2018 at 5:54 PM, Rodney Bizzell <hardworker30 at gmail.com>
>> wrote:
>>
>>> I am trying to send logs to my graylog log server and I am getting I am
>>> sending a test message from my syslog server to graylog load-balancer and I
>>> can connect server using netcat and port 12201, but when I send an echo
>>> test message 205 bytes sent 0 bytes received. Nothing shows up in graylog.
>>> I checked the my logs and I am seeing this error message Connection failed;
>>> fd=‘14’, server=‘AF_INET(18.213.45.65:12201)’, local=‘AF_INET(0.0.0.0:0)’,
>>> error='Permission denied (13)
>>>
>>> On Fri, Nov 2, 2018 at 2:29 PM Fosiul Alam <fosiul at gmail.com> wrote:
>>>
>>>> Hello
>>>> i have installed syslog-ng in our ubuntu server with version : 3.13
>>>>
>>>> its running fine, I am using the default syslog-ng file and i have
>>>> change this line as per documentation
>>>>
>>>> source s_net { syslog(ip(192.168.1.19) transport("tcp")); };
>>>>
>>>> but its not listing on port 514
>>>>
>>>> What Do i have to do make it listen ?
>>>>
>>>> Thanks for the help
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ● syslog-ng.service - System Logger Daemon
>>>>    Loaded: loaded (/lib/systemd/system/syslog-ng.service; enabled;
>>>> vendor preset: enabled)
>>>>    Active: active (running) since Fri 2018-11-02 18:22:46 UTC; 4min 5s
>>>> ago
>>>>      Docs: man:syslog-ng(8)
>>>>  Main PID: 16470 (syslog-ng)
>>>>     Tasks: 1 (limit: 2361)
>>>>    CGroup: /system.slice/syslog-ng.service
>>>>            └─16470 /usr/sbin/syslog-ng -F
>>>>
>>>> Nov 02 18:22:46 syslog systemd[1]: Starting System Logger Daemon...
>>>> Nov 02 18:22:46 syslog systemd[1]: Started System Logger Daemon.
>>>>
>>>>
>>>> --
>>>> Regards
>>>> Fosiul Alam
>>>>
>>>>
>>>> ______________________________________________________________________________
>>>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>>>> Documentation:
>>>> http://www.balabit.com/support/documentation/?product=syslog-ng
>>>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>>>
>>>>
>>>
>>> ______________________________________________________________________________
>>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>>> Documentation:
>>> http://www.balabit.com/support/documentation/?product=syslog-ng
>>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>>
>>>
>>>
>>
>> ______________________________________________________________________________
>> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
>> Documentation:
>> http://www.balabit.com/support/documentation/?product=syslog-ng
>> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>>
>>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.balabit.hu/pipermail/syslog-ng/attachments/20181105/835693c0/attachment.html>