02 Oct

Graylog2: “Could not bind UDP syslog input to address /”


Received error “Could not bind UDP syslog input to address /, Failed to bind to: /, Address already in use” when adding log input using UDP 514 (default syslog port).


In UNIX/LINUX, assigned port 1024 and below require root privilege. Either you run graylog2 as root (not recommended) or follow below workaround.


1. Create new Syslog UDP inputs and listen to any port (ex: 5514).
2. Manipulate traffic using iptable:
iptables -t nat -A PREROUTING -i eth0 -p udp -m udp --dport 514 -j REDIRECT --to-ports 5514

Incoming search terms:

  • https://advanxer com/blog/2014/10/graylog2-could-not-bind-udp-syslog-input-to-address-0-0-0-0514-failed-to-bind-to-0-0-0-0514-address-already-in-use/
  • Error starting the servererrorlisten tcp 0 0 0 0:514: bind: permission denied
  • graylog failing to bind to external ip
  • graylog input 514
  • graylog input bind address
  • graylog input not working
  • graylog not binding to 0 0 0 0
  • graylog start syslog 514
  • graylog syslog 514
  • graylog syslog bind
  • graylog syslog input failed
  • graylog syslog input fails to start
  • graylog syslog udp failed
  • graylog syslog udp port 514
  • https://yandex ru/clck/jsredir?from=yandex ru;search;web;;&text=&etext=1825 CYnBY5_SCrDy8UwcjgCmujx7n7o8g_jDeKg_5BPc3ZSVWZUKGiCvvbOVZifC0Rwk 5ef2f6e1aacc0fe99f61a172d0dcbea3b9ac139b&uuid=&state=_BLhILn4SxNIvvL0W45KSic66uCIg23qh8iRG98qeIXme