Why is Syslog not listening to port 6514?

[debjit_k]

There is a scenario like one of our trend micro DDA is not reporting to our syslog server.

Why it is not reporting 

Previously we use port 514 and now we are using port 6514 but 6514 is not reporting to syslog. And we want both the listening port 514 and 6514.

My question 

1. Can we have both the port open on our syslog I.e. 514 and 6514 

2. How to enable the port listing on our syslog for the port 6514 

Thank you 

[gcusello]

Hi @debjit_k,

are you speaking of enabling a port syslog receiving in Splunk or using a different system (e.g. r-syslog)?

if you are speaking of Splunk syslog receiving, you can enable on Splunk al the ports you like, but only the ones permitted by your operative system.

If a port is already in use, you have an error in Splunk, but it's configurable by conf file instead by GUI.

So the real questions are:

• can the Operative system of the receiver use the 6514 port?
• can the sender send logs on port 6514?

As you can see the question isn't more on Splunk, but outside it.

Ciao.

Giuseppe