cancel
Showing results for 
Search instead for 
Did you mean: 
BW1
Level 7
Report Inappropriate Content
Message 1 of 4

MWG 7.8.2 Adding second syslog server

We are currently successfully sending logs to a syslog server on port 518 (UDP) but want to add a second server using port 1523 (UDP). I have tried amending rsyslog.conf using the File Editor from

 From.PNG

To

To.PNG

Unfortunately no logs are sent to the server on port 1523, which I have confirmed using tcpdump.

Any suggestions how to resolve this problem?

Thanks

Barry

 
 

 

Labels (2)
3 Replies
Reliable Contributor AaronT
Reliable Contributor
Report Inappropriate Content
Message 2 of 4

Re: MWG 7.8.2 Adding second syslog server

Does it work if you only have 1523 defined in the rsyslog.conf?  (confirming no firewalls in between)

BW1
Level 7
Report Inappropriate Content
Message 3 of 4

Re: MWG 7.8.2 Adding second syslog server

It only works if I use the original IP address - I can use port 1523 OK.

If I try to use the new IP, no traffic is seen in the tcpdump, regardless of port

Highlighted
Reliable Contributor AaronT
Reliable Contributor
Report Inappropriate Content
Message 4 of 4

Re: MWG 7.8.2 Adding second syslog server

Maybe a reboot of the proxy will do the trick (or restarting rsyslogd)? I'm not sure, just speculating
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community