SharkDiverToo

I restarted in Safe Mode, port 514 is still shwoing as closed: PS C:\Windows\system32> nmap -sU -p 514 10.0.10.30 Starting Nmap 7.80 ( https://nmap.org ) at 2020-08-05 10:14 Eastern Daylight Time Nmap scan report for 10.0.10.30 Host is up (0.0010s latency). PORT STATE SERVICE 514/udp closed syslog MAC Address: 0C:C4:7A:DE:D8:A8 (Super Micro Computer) Nmap done: 1 IP address (1 host up) scanned in 0.43 seconds Next I deleted the rsyslog.cfg & the rsyslog.conf again, rebooted back into Safe Mode again, still not listening on UDP 514: PS C:\Windows\system32> nmap -sU -p 514 10.0.10.30 Starting Nmap 7.80 ( https://nmap.org ) at 2020-08-05 10:24 Eastern Daylight Time Nmap scan report for 10.0.10.30 Host is up (0.00s latency). PORT STATE SERVICE 514/udp closed syslog MAC Address: 0C:C4:7A:DE:D8:A8 (Super Micro Computer) Nmap done: 1 IP address (1 host up) scanned in 0.38 seconds Does rsyslog startup in Safe Mode? I went back to my Flash Drive and looking in the config directory, the rsyslog.cfg & rsyslog.conf were not recreated after deleting them and rebooting in Safe Mode. Should I be remvoing the rsyslog.local file as well? I see it contains the settings from the syslog GUI settings. Thanks for your time and assistance with this.

I have not made any chages to the system. Was reading about the syslog and possibly using Splunk Docker to review logs (haven't set that up yet). All I did was turn on the syslog base on the information from teh forum and then wasn't seeing anything getting logged from teh server or my UniFi UDM (pointed the syslog of that to the unraid server IP as well). I Just performed the: Delete the files "rsyslog.cfg" and "rsyslog.conf" in the /config folder on your flash device Reboot your server Configure the syslog server settings I am still not seeing anything getting written to the syslog folder. I rebooted again after configuring the syslog. unraid is still not listening on port 514: PS C:\Windows\system32> nmap -sU -p 514 10.0.10.30 Starting Nmap 7.80 ( https://nmap.org ) at 2020-08-04 10:20 Eastern Daylight Time Nmap scan report for 10.0.10.30 Host is up (0.00013s latency). PORT STATE SERVICE 514/udp closed syslog MAC Address: 0C:C4:7A:DE:D8:A8 (Super Micro Computer) Nmap done: 1 IP address (1 host up) scanned in 0.40 seconds

I just turned on syslog on my UNRAID, I set the remote logging to the IP address of my unraid system, I stopped the array and rebooted (because I was not getting any logs). I did a diagnostic dump and saw error messages stating that there was possibly network connectivity on udp port (though the port is not listed but since the syslog is set for 514 that is what I figured isn't open on the unraid server). Aug 3 18:53:54 Shark-Dive rsyslogd: omfwd/udp: socket 5: sendto() error: Network is unreachable [v8.2002.0 try https://www.rsyslog.com/e/2354 ] I ran an nmap against my unraid server IP and it shows the server is not listening on UDP port 514. How can I get udp 514 listening on my unraid server? shark-dive-diagnostics-20200803-2009.zip