Syslog Configuration

[Siemsdc]

syslog integration‌ :

Dear Team 

while integration of Syslog Port 514 is not being accepting in syslog event source 

In our RSA  env 11.3.1.1

Kindly support 

Vijay Kumar Tumu

9052016880

[DaveGlover]

Can you explain a little further? If you are sending syslog to log decoder there is nothing to configure, it automatically listens on port 514

[Siemsdc]

Log Collection: Configure Syslog Event Sources‌Syslog ConfigurationLog Collection Event Destinations Tab

Hi, Below is the screen shot of the error in Log collector under event sources and event destination status.

Issue : We are unable to add port 514 under syslog-tcp OR syslog-udp under syslog/config of log collector event sources.

[JoshRandall]

The log decoder service is already listening on ports 514 and 6514, which is why the local log collector service on the decoder cannot also listen on either of those ports.

If you hover over the error icon, you will see that those ports are not allowed:

[Siemsdc]

Hi Thanks for your reply,

we were following the instructions as per the document and it says to enter 514, please suggest on this...

[DaveGlover]

This configuration doc is used to configure syslog collection on a remote log collector/vlc, not on a log collector that’s part of a log decoder.

Can you describe on which device you are trying to configure according to the document?