title: Messages from Gelf4Net are not stored in Graylog2
body: <p>I have an Ubuntu server with Elasticsearch, MongoDB, and Graylog2 running in Azure, and I have an asp.net mvc4 application I am trying to send logs from. (I am using Gelf4Net / Log4Net as the logging component). To cut to the chase, nothing is being logged.</p>
  
  <p>(skip to the update to see what is wrong)</p>
  
  <h2>The setup</h2>
  
  <ul>
  <li>1 Xsmall Ubuntu VM running the needed software for graylog2
  <ul>
  <li>everything is running as a daemon</li>
  </ul></li>
  <li>1 Xsmall cloud service with the MVC4 app (2 instnaces)</li>
  <li>A virtual network setup so they can talk. </li>
  </ul>
  
  <h2>So what have I tried?</h2>
  
  <ul>
  <li>From the linux box the follow command will cause a message to be logged <code>echo "&lt;86&gt;Dec 24 17:05:01 foo-bar CRON[10049]: pam_unix(cron:session):" |
  nc -w 1 -u 127.0.0.1 514</code></li>
  <li>I can change the IP address to use the public IP and it works fine as well.</li>
  <li>using <a href="http://pshscripts.blogspot.co.uk/2008/12/send-udpdatagramps1.html" rel="nofollow">this powershell script</a> I can log the same message from my dev machine as well as the production web server</li>
  <li>Windows firewall turned off and it still doesn't work.</li>
  <li>I can log to a FileAppender Log4Net, so I know Log4Net is working.</li>
  <li>tailing the graylog2.log shows nothing of interest. Just a few warning about my plugin directory
  So I know everything is working, but I can't get the Gelf4Net appender to work. I'm a loss here. Where can I look? Is there something I am missing</li>
  </ul>
  
  <p><strong>GRAYLOG2.CONF</strong></p>
  
  <pre><code>#only showing the connection stuff here. If you need something else let me know
  syslog_listen_port = 514
  syslog_listen_address = 0.0.0.0
  syslog_enable_udp = true
  syslog_enable_tcp = false
  </code></pre>
  
  <p><strong>web.config/Log4Net</strong></p>
  
  <pre><code>//application_start() has log4net.Config.XmlConfigurator.Configure();
  
  &lt;log4net &gt;
    &lt;root&gt;
      &lt;level value="ALL" /&gt;
      &lt;appender-ref ref="GelfUdpAppender" /&gt;
    &lt;/root&gt;
    &lt;appender name="GelfUdpAppender" type="Gelf4net.Appender.GelfUdpAppender, Gelf4net"&gt;
      &lt;remoteAddress value="public.ip.of.server"/&gt;
      &lt;remotePort value="514" /&gt;
      &lt;layout type="Gelf4net.Layout.GelfLayout, Gelf4net"&gt;
        &lt;param name="Facility" value="RandomPhrases" /&gt;
      &lt;/layout&gt;
    &lt;/appender&gt;
  &lt;/log4net&gt;
  </code></pre>
  
  <hr>
  
  <p><strong>update</strong></p>
  
  <p>for some reason it didn't occur to me to run graylog in debug mode :) Doing so shows this message.</p>
  
  <blockquote>
    <p>2013-04-09 03:00:56,202 INFO : org.graylog2.inputs.syslog.SyslogProcessor - Date could not be parsed. Was set to NOW because allow_override_syslog_date is true.
    2013-04-09 03:00:56,202 DEBUG: org.graylog2.inputs.syslog.SyslogProcessor - Skipping incomplete message.</p>
  </blockquote>
  
  <p>So it is sending an incomplete message. How can I see what is wrong with it?</p>