When a remote syslog address is configured using an FQDN and bound to a non-default VRF, log forwarding does not work. The same configuration works correctly when either (a) the server is specified by IP address instead of FQDN, or (b) the FQDN is used in the default VRF.
Config: set system syslog remote fqdn.vyos facility all level 'all' set system syslog remote fqdn.vyos port '514' set system syslog remote fqdn.vyos protocol 'tcp' set system syslog remote fqdn.vyos vrf 'red' vyos@vyos# sudo ip vrf exec red dig fqdn.vyos ; <<>> DiG 9.18.49-1~deb12u1-Debian <<>> fqdn.vyos ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16636 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;fqdn.vyos. IN A ;; ANSWER SECTION: fqdn.vyos. 0 IN A 192.168.0.2 ;; Query time: 2 msec ;; SERVER: 192.168.0.3#53(192.168.0.3) (UDP) ;; WHEN: Tue Jul 14 09:29:08 UTC 2026 ;; MSG SIZE rcvd: 73 [edit]Logs: Jul 14 08:54:13 rsyslogd[2062]: cannot resolve hostname 'fqdn.vyos] Jul 14 08:56:27 rsyslogd[2062]: cannot resolve hostname 'fqdn.vyos] Jul 14 08:58:19 rsyslogd[2062]: cannot resolve hostname 'fqdn.vyos] Jul 14 09:00:07 rsyslogd[2062]: cannot resolve hostname 'fqdn.vyos] Jul 14 09:02:13 rsyslogd[2062]: cannot resolve hostname 'fqdn.vyos] Jul 14 09:04:04 rsyslogd[2062]: cannot resolve hostname 'fqdn.vyos]
Related Task references: