We have added brocade switches to heavy forwarder via tcp:6514. We are able to receive the logs , but not in a readable format.
\x00a\x00\x00]"e8H,W\xCC\xA7az\xB9\xFF\xFB\xFE\x9E\x8C
\xC5\xCBhQ\x8E\xD1a{\x00\x00\x00=\x005\x00<\x00/\x00
\x00\xFF\x00\x00(\x00#\x00\x00\x00
\x00 \x00
input.conf
[tcp://6514]
connection_host = dns
index = san
sourcetype = BROCADE_SWITCH
settings in Brocade switch
-secure -port 6514 to the syslogadmin --setip cmd
Switch type
2 model type 6520's
4 model type 5480
2 model- bvlfcsw100/200
The brocade switch has to be always pointed to UDP 514 in HF or UF. If we point towards any other port like how I was using TCP 6514 we receive only encrypted data and non readable since it becomes secured port.
The brocade switch has to be always pointed to UDP 514 in HF or UF. If we point towards any other port like how I was using TCP 6514 we receive only encrypted data and non readable since it becomes secured port.
The issue has been solved now I am able to get readable logs from the brocade..
@nairv please share what you did to solve your challenge so others can learn