{"action":"created","issue":{"url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/642","repository_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon","labels_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/642/labels{/name}","comments_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/642/comments","events_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/642/events","html_url":"https://github.com/pavel-odintsov/fastnetmon/issues/642","id":217669811,"number":642,"title":"Remote syslog not working","user":{"login":"dmayan","id":23533736,"avatar_url":"https://avatars3.githubusercontent.com/u/23533736?v=3","gravatar_id":"","url":"https://api.github.com/users/dmayan","html_url":"https://github.com/dmayan","followers_url":"https://api.github.com/users/dmayan/followers","following_url":"https://api.github.com/users/dmayan/following{/other_user}","gists_url":"https://api.github.com/users/dmayan/gists{/gist_id}","starred_url":"https://api.github.com/users/dmayan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmayan/subscriptions","organizations_url":"https://api.github.com/users/dmayan/orgs","repos_url":"https://api.github.com/users/dmayan/repos","events_url":"https://api.github.com/users/dmayan/events{/privacy}","received_events_url":"https://api.github.com/users/dmayan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-03-28T19:38:47Z","updated_at":"2017-03-28T19:53:32Z","closed_at":null,"body":"Hi Pavel,\r\n\r\nI have enabled logging:remote_syslog_logging so I can get notifications via my Graylog installation.\r\n\r\n```\r\nlogging:local_syslog_logging = off\r\n\r\nlogging:remote_syslog_logging = on\r\n\r\nlogging:remote_syslog_server = 172.16.2.131\r\nlogging:remote_syslog_port = 5514\r\n\r\n```\r\n\r\nThe Graylog server is working correctly as I'm collecting all my network logs there.\r\n\r\nWhat could be the problem? Running on Debian 8.6 VM. Graylog is the same.\r\n\r\nThanks, Diego"},"comment":{"url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/comments/289884847","html_url":"https://github.com/pavel-odintsov/fastnetmon/issues/642#issuecomment-289884847","issue_url":"https://api.github.com/repos/pavel-odintsov/fastnetmon/issues/642","id":289884847,"user":{"login":"pavel-odintsov","id":2744166,"avatar_url":"https://avatars3.githubusercontent.com/u/2744166?v=3","gravatar_id":"","url":"https://api.github.com/users/pavel-odintsov","html_url":"https://github.com/pavel-odintsov","followers_url":"https://api.github.com/users/pavel-odintsov/followers","following_url":"https://api.github.com/users/pavel-odintsov/following{/other_user}","gists_url":"https://api.github.com/users/pavel-odintsov/gists{/gist_id}","starred_url":"https://api.github.com/users/pavel-odintsov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pavel-odintsov/subscriptions","organizations_url":"https://api.github.com/users/pavel-odintsov/orgs","repos_url":"https://api.github.com/users/pavel-odintsov/repos","events_url":"https://api.github.com/users/pavel-odintsov/events{/privacy}","received_events_url":"https://api.github.com/users/pavel-odintsov/received_events","type":"User","site_admin":false},"created_at":"2017-03-28T19:53:32Z","updated_at":"2017-03-28T19:53:32Z","body":"Hello!\r\n\r\nAccording to logs it was configured correctly:\r\n```\r\n     5 2017-03-26 17:18:19,679 [INFO] We have configured remote syslog logging corectly\r\n     6 2017-03-26 17:18:19,679 [INFO] We will read ban settings for my_hosts\r\n     7 2017-03-26 17:18:19,679 [ERROR] We can't find notify script /usr/local/bin/notify_about_attack.sh\r\n     8 2017-03-26 17:18:19,685 [INFO] Read configuration file\r\n     9 2017-03-26 17:18:19,685 [INFO] We start remote syslog logging corectly\r\n```\r\n\r\nCould you check it with tcpdump in source / target machine?"}}
{"actor":{"display_login":"pavel-odintsov"}}