- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Port number in event field

rs2OOO
New Member
05-09-2018
12:29 PM
Sorry for a beginners question, but I have been thrown in the deep end with this.
I have an error.log file, in the event part for each entry it shows [time] [error] [pid number] [IP address:Port number] and then some text.
Does the Port number refer to the IP address shown or to the server creating the error log?
Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

rs2OOO
New Member
05-10-2018
12:15 AM
Thanks, that's what I expected but had hoped it was showing the internal port number.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
05-09-2018
12:49 PM
There's a 99.9999% chance the port number refers to the IP address.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

woodcock
Esteemed Legend
05-09-2018
09:33 PM
I'd say 100%. That is standard network convention.
