{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/logstash/issues/3214","repository_url":"https://api.github.com/repos/elastic/logstash","labels_url":"https://api.github.com/repos/elastic/logstash/issues/3214/labels{/name}","comments_url":"https://api.github.com/repos/elastic/logstash/issues/3214/comments","events_url":"https://api.github.com/repos/elastic/logstash/issues/3214/events","html_url":"https://github.com/elastic/logstash/issues/3214","id":75031521,"number":3214,"title":"Logstash syslog input causing a \"UDP Listener died\" error","user":{"login":"deusofnull","id":3485446,"avatar_url":"https://avatars.githubusercontent.com/u/3485446?v=3","gravatar_id":"","url":"https://api.github.com/users/deusofnull","html_url":"https://github.com/deusofnull","followers_url":"https://api.github.com/users/deusofnull/followers","following_url":"https://api.github.com/users/deusofnull/following{/other_user}","gists_url":"https://api.github.com/users/deusofnull/gists{/gist_id}","starred_url":"https://api.github.com/users/deusofnull/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deusofnull/subscriptions","organizations_url":"https://api.github.com/users/deusofnull/orgs","repos_url":"https://api.github.com/users/deusofnull/repos","events_url":"https://api.github.com/users/deusofnull/events{/privacy}","received_events_url":"https://api.github.com/users/deusofnull/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elastic/logstash/labels/bug","name":"bug","color":"e11d21"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-05-11T00:07:21Z","updated_at":"2016-04-22T12:00:37Z","closed_at":null,"body":"Hi all,\r\n\r\nI am trying to receive syslog input from a syslog server which is being fed logs from Docker containers via logspout.\r\n I am rather sure that I configured the input correctly to receive syslog on port 5000.  Here is my input config for syslog\r\n\r\n    syslog {\r\n        port => 5000\r\n        type => \"docker_log\"\r\n    }\r\n\r\nAnd here is my full input config on pastebin:  http://pastebin.com/qcX5tFTi\r\n\r\nHere is the error I am receiving: http://pastebin.com/jJxZsULX\r\n```\r\n    {:timestamp=>\"2015-05-09T21:17:44.676000+0000\", :message=>\"UDP listener died\", :exception=>#<SocketError: recvfrom: name or service not known>, :backtrace=>[\"/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-udp-0.1.3/lib/logstash/inputs/udp.rb:79:in `udp_listener'\", \"/opt/logstash/vendor/bundle/jruby/1.9/gems/logstash-input-udp-0.1.3/lib/logstash/inputs/udp.rb:49:in `run'\", \"/opt/logstash/lib/logstash/pipeline.rb:174:in `inputworker'\", \"/opt/logstash/lib/logstash/pipeline.rb:168:in `start_input'\"], :level=>:warn}\r\n```\r\n\r\nThe port is being used by Logstash, as shown by \r\n```\r\nsudo lsof -nPi :5000\r\n\r\n\r\nCOMMAND  PID     USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME\r\njava    6837 logstash   13u  IPv6 1260946      0t0  UDP *:5000 \r\njava    6837 logstash   16u  IPv6 1260947      0t0  TCP *:5000 (LISTEN)\r\n\r\n```\r\n\r\nI've tried reading up on this ticket https://github.com/elastic/logstash/issues/1896 but I don't think this is a reserved port issue or a permissions issue.  \r\n\r\nCould anyone help me debug this error?  From what I can tell, my configuration is correct.  \r\n"},"comment":{"url":"https://api.github.com/repos/elastic/logstash/issues/comments/213395812","html_url":"https://github.com/elastic/logstash/issues/3214#issuecomment-213395812","issue_url":"https://api.github.com/repos/elastic/logstash/issues/3214","id":213395812,"user":{"login":"jotunskij","id":1684523,"avatar_url":"https://avatars.githubusercontent.com/u/1684523?v=3","gravatar_id":"","url":"https://api.github.com/users/jotunskij","html_url":"https://github.com/jotunskij","followers_url":"https://api.github.com/users/jotunskij/followers","following_url":"https://api.github.com/users/jotunskij/following{/other_user}","gists_url":"https://api.github.com/users/jotunskij/gists{/gist_id}","starred_url":"https://api.github.com/users/jotunskij/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jotunskij/subscriptions","organizations_url":"https://api.github.com/users/jotunskij/orgs","repos_url":"https://api.github.com/users/jotunskij/repos","events_url":"https://api.github.com/users/jotunskij/events{/privacy}","received_events_url":"https://api.github.com/users/jotunskij/received_events","type":"User","site_admin":false},"created_at":"2016-04-22T12:00:37Z","updated_at":"2016-04-22T12:00:37Z","body":"@davidt99 Unfortunately I already published the port with /udp specified. However I did seem to solve this problem by just switching the port and binding to 0.0.0.0. This is the complete flag I'm using with docker run:\r\n`--publish 0.0.0.0:12201:12201/udp`"}}