Can I use an alterative port for syslog if 514 is already taken?

[nina g]

I currently have an Ubuntu 20.04 server receiving logs (via syslog) from our load balancer over UDP port 514.

I also want to use the same Ubuntu server to receive logs (via syslog) from our vcenter appliance.

Since port 514 is already used for syslog on my syslog server, can I use another port to send syslog from my vcenter to my Ubuntu?

I seen it possible but I wasn't sure if there were any restrictions to the ports I can use or if there are other configuration considerations I need to make aside from configuring the network to ensure proper flow based on the port I choose.

 

[dos2unix]

Are you using rsyslog, or syslong-ng?

If so, you can look in /etc/rsyslog.conf for a line that says something similar to this.

#input(type="imudp" port="514")

Uncomment the line, and change the port. Of course you're log receiver on the other end will need to listen
on the same port.

Near the bottom of this file, you can use these lines as a template.

# # Remote Logging (we use TCP for reliable delivery)
# # remote_host is: name/ip, e.g. 192.168.0.1, port optional e.g. 10514
#Target="remote_host" Port="XXX" Protocol="tcp")