I have a network device having IP 10.23.50.99 (ACME controller telecom device), which is pointed to our syslog-ng (udp 514) server for sending the syslog data from itself. The firewall is showing traffic is passing thru from acme device to syslog-ng server, even I can see the traffic coming on my syslog-ng server using tcpdump, but syslog-ng is not writing the syslog data from this acme device to the log file. There are other telecom and network devices for which syslog-ng is writing data without any issues, only this particular server is having the problem. I want to troubleshoot this asap, so need help from the experts.
Let me know what can be done in this case?