topic Re: Syslog splunk on netasq u70 v9 ? in Getting Data In

Syslog splunk on netasq u70 v9 ?

mairielbs — Mon, 08 Dec 2014 07:25:38 GMT

Hi everyone,

just started with splunk. I installed it on a windows pro, but cant understand how it works : i d like receive my syslog from my Netasq u70 (syslog on 514 udp port activated and tested : it works ) on the splunk. So i tried to setting up the "forwarding and receiving". In the "receiving part" i wrote the 514 port but its doesnt work, its seems not receving the syslog from my Netasq.

So i am wrong ? Whats the procedure to config it ?

Thx you very much

Re: Syslog splunk on netasq u70 v9 ?

mairielbs — Wed, 10 Dec 2014 12:50:41 GMT

No one 😞 ?

Re: Syslog splunk on netasq u70 v9 ?

Ayn — Wed, 10 Dec 2014 13:25:31 GMT

You shouldn't configure a receiving port, you should configure a data input port. Receiving ports are reserved for forwarded traffic between Splunk instances.