topic Not receiving readable logs from Brocade Switches in Getting Data In

Not receiving readable logs from Brocade Switches

nairv — Tue, 29 Sep 2020 20:56:34 GMT

We have added brocade switches to heavy forwarder via tcp:6514. We are able to receive the logs , but not in a readable format.

\x00a\x00\x00]"e8H,W\xCC\xA7az\xB9\xFF\xFB\xFE\x9E\x8C
֋\xC5\xCBhQ\x8E\xD1a{\x00\x00\x00=\x005\x00<\x00/\x00
\x00\xFF\x00\x00(\x00#\x00\x00\x00
\x00 \x00

input.conf
[tcp://6514]
connection_host = dns
index = san
sourcetype = BROCADE_SWITCH

settings in Brocade switch

-secure -port 6514 to the syslogadmin --setip cmd

Switch type
2 model type 6520's
4 model type 5480
2 model- bvlfcsw100/200

Re: Not receiving readable logs from Brocade Switches

nairv — Thu, 30 Aug 2018 15:24:22 GMT

The issue has been solved now I am able to get readable logs from the brocade..

Re: Not receiving readable logs from Brocade Switches

adonio — Thu, 30 Aug 2018 18:03:42 GMT

@nairv please share what you did to solve your challenge so others can learn

Re: Not receiving readable logs from Brocade Switches

nairv — Thu, 30 Aug 2018 18:40:53 GMT

The brocade switch has to be always pointed to UDP 514 in HF or UF. If we point towards any other port like how I was using TCP 6514 we receive only encrypted data and non readable since it becomes secured port.