topic Re: We have an app on a server for which we want to send logs to splunk. in Splunk Search https://community.splunk.com/t5/Splunk-Search/We-have-an-app-on-a-server-for-which-we-want-to-send-logs-to/m-p/378101#M169754 <P>The Port used to initiate a connection from is random for several reasons, and this behaviour is common practice.</P> <P>Splunk doesn't offer a config parameter to change this, and (if I remember correctly) is behavior determined on a lower level (C library/operating system).</P> <P>I can't think of a good reason to force this to be a fixed port - maybe you can explain why you want to do this? Maybe we can find an alternative, or there is simply a misunderstanding in how this is supposed to work?</P> Tue, 01 May 2018 13:22:47 GMT xpac 2018-05-01T13:22:47Z We have an app on a server for which we want to send logs to splunk. https://community.splunk.com/t5/Splunk-Search/We-have-an-app-on-a-server-for-which-we-want-to-send-logs-to/m-p/378100#M169753 <P>We have an app on a server for which we want to send logs to splunk. The splunk host is listening on 9997 while our server is sending data via inconsistent ports. We want to make splunk forwarder to use 9997 to send data to splunk host server.</P> <P>LocalAddress LocalPort RemoteAddress RemotePort State AppliedSetting OwningProcess <BR /> XXXXXXXXX.13 65518(This changes) XXXXXXXXXXXX 9997 Established Internet splunkd.exe </P> <P>Please help what we need to do so that the local port is listening to forwarders on 9997 to send data to host on their 9997 port.</P> Tue, 01 May 2018 04:56:53 GMT https://community.splunk.com/t5/Splunk-Search/We-have-an-app-on-a-server-for-which-we-want-to-send-logs-to/m-p/378100#M169753 samqadir 2018-05-01T04:56:53Z Re: We have an app on a server for which we want to send logs to splunk. https://community.splunk.com/t5/Splunk-Search/We-have-an-app-on-a-server-for-which-we-want-to-send-logs-to/m-p/378101#M169754 <P>The Port used to initiate a connection from is random for several reasons, and this behaviour is common practice.</P> <P>Splunk doesn't offer a config parameter to change this, and (if I remember correctly) is behavior determined on a lower level (C library/operating system).</P> <P>I can't think of a good reason to force this to be a fixed port - maybe you can explain why you want to do this? Maybe we can find an alternative, or there is simply a misunderstanding in how this is supposed to work?</P> Tue, 01 May 2018 13:22:47 GMT https://community.splunk.com/t5/Splunk-Search/We-have-an-app-on-a-server-for-which-we-want-to-send-logs-to/m-p/378101#M169754 xpac 2018-05-01T13:22:47Z