# Logstash syslog wont accept ports other than 514

**URL:** https://discuss.elastic.co/t/logstash-syslog-wont-accept-ports-other-than-514/92445
**Category:** Logstash
**Created:** [July 10, 2017, 10:14am UTC](https://discuss.elastic.co/t/logstash-syslog-wont-accept-ports-other-than-514/92445 "2017-07-10T10:14:52Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![X\_Calibur](https://avatars.discourse-cdn.com/v4/letter/x/b2d939/32.png) [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)
#### Post date: [July 10, 2017, 10:14am UTC](https://discuss.elastic.co/t/logstash-syslog-wont-accept-ports-other-than-514/92445/1 "2017-07-10T10:14:52Z")

</div>

I'm trying to get logstash to accept Syslog transmissions and it's giving me the following error messages:

`syslog listener died {:protocol=>:udp, :address=>"0.0.0.0:514", :exception=>#<SocketError: bind: name or service not known>,`

` syslog listener died {:protocol=>:tcp, :address=>"0.0.0.0:514", :exception=>#<Errno::EACCES: Permission denied - bind(2)>`

Following is my config file:

> input{

> ```
> syslog {
> type => "fortigate"
> port => 55555
> }
> 
> ```

> }

> output{  
> elasticsearch {  
> hosts =\> ["localhost:9200"]  
> index =\> "fortigate-%{+YYYY.MM.dd}"  
> }  
> }

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 12, 2017, 12:26pm UTC](https://discuss.elastic.co/t/logstash-syslog-wont-accept-ports-other-than-514/92445/2 "2017-07-12T12:26:21Z")

</div>

Unless you run Logstash as root or employ another workaround Logstash won't be able to listen on port 514. Are you sure that's the only configuration you have? Your logs clearly indicate Logstash trying to bind to port 514 but your configuration file says 55555.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 9, 2017, 12:26pm UTC](https://discuss.elastic.co/t/logstash-syslog-wont-accept-ports-other-than-514/92445/3 "2017-08-09T12:26:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.