Syslog Source does not receive any messages.

[the-maldridge]

Question

I am trying to use vector as a system level logging daemon to receive all syslog writes and send them elsewhere. So far, no syslog messages are working, and its unclear how to troubleshoot what is wrong here.

I can start up a socklog process and that receives log messages just fine, it seems to only be vector that does not receive them.

Vector Config

sources:
  log:
    type: syslog
    mode: unix
    path: /dev/log
    socket_file_mode: 511 # https://github.com/vectordotdev/vector/issues/23530

sinks:
  out:
    inputs: ["log"]
    type: console
    encoding:
      codec: text

Vector Logs

2025-08-05T21:41:20.717784Z  INFO vector::app: Log level is enabled. level="info"
2025-08-05T21:41:20.718397Z  INFO vector::app: Loading configs. paths=["config.yaml"]
2025-08-05T21:41:20.721048Z  INFO vector::topology::running: Running healthchecks.
2025-08-05T21:41:20.721174Z  INFO vector: Vector has started. debug="false" version="0.48.0" arch="x86_64" revision=""
2025-08-05T21:41:20.721208Z  INFO vector::topology::builder: Healthcheck passed.
2025-08-05T21:41:20.721381Z  INFO source{component_kind="source" component_id=log component_type=syslog}: vector::sources::util::unix_stream: Listening. path="/dev/log" type="unix"
2025-08-05T21:41:20.722756Z  INFO vector::internal_events::api: API server running. address=127.0.0.1:8686 playground=http://127.0.0.1:8686/playground graphql=http://127.0.0.1:8686/graphql