Sending syslog from MachineA to ServerB..Thru port 514. Not successful.

[limwesiang]

Can anyone give me any hint about this? I have splunk installed in ServerB, Windows server 2008 and i have MachineA, XP. I hope to send the syslog from MachineA to ServerB thru port 514. To be make sure that, port 514 is listening in ServerB. Besides, i set it up thru the syslog by TCP port as following the document guide. But yet, i still cant get any results from that.

[lguinn2]

First, can you telnet from MachineA to ServerB?

Is the port open in the firewall on both MachineA and ServerB?

Are there any firewalls between the servers that might be blocking access?

Is MachineA sending syslog via TCP or UDP? The usual default for syslog is UDP, although it depends on how it is configured.

[limwesiang]

BTW, thanks a lot for your answer. appreciate of it.

[limwesiang]

Yup. it is ok to telnet from MachineA to ServerB.
Besides, the port is also listening..
yes, finally i figure out the problem is because the serverB is not allowed to receive from network...therefore, it is worked after i allow it.