Can I use an alterative port for syslog if 514 is already taken?

nina g

New Member
Joined
Dec 23, 2021
Messages
5
Reaction score
0
Credits
49
I currently have an Ubuntu 20.04 server receiving logs (via syslog) from our load balancer over UDP port 514.

I also want to use the same Ubuntu server to receive logs (via syslog) from our vcenter appliance.

Since port 514 is already used for syslog on my syslog server, can I use another port to send syslog from my vcenter to my Ubuntu?

I seen it possible but I wasn't sure if there were any restrictions to the ports I can use or if there are other configuration considerations I need to make aside from configuring the network to ensure proper flow based on the port I choose.
 


dos2unix

Well-Known Member
Joined
May 3, 2019
Messages
1,641
Reaction score
1,254
Credits
10,651
Are you using rsyslog, or syslong-ng?

If so, you can look in /etc/rsyslog.conf for a line that says something similar to this.

#input(type="imudp" port="514")

Uncomment the line, and change the port. Of course you're log receiver on the other end will need to listen
on the same port.

Near the bottom of this file, you can use these lines as a template.

# # Remote Logging (we use TCP for reliable delivery)
# # remote_host is: name/ip, e.g. 192.168.0.1, port optional e.g. 10514
#Target="remote_host" Port="XXX" Protocol="tcp")
 
$100 Digital Ocean Credit
Get a free VM to test out Linux!

Linux.org Hosting Donations
Consider making a donation


Top