I have several routerboards that I setup for remote logging and none of them work. On the same network I have an HP switch and Cisco router that are working to send syslog messages. I also have other devices on other networks using this syslog server just fine. I am using Splunk. The firewall into the syslog server is wide open for UDP 514.
I tweaked every setting available. I used the default rules and actions, added the source IP, disabled all local logging so everything was going to remote. Tried custom rules and actions, and I am not getting a single message in from my routerboards.
Local logging works fine, just not remote.
I've got 2011L's running 2.41 firmware.
Anyone have any ideas?