log forwarding

[cdinet]

Ok, open a ticket then please so we can take a look at logs.

[jaklsdjfalsdfj]

thanks for your help and participation
.
I have a ticket opened already - 4-22317055031

[cdinet]

Your screenshot shows test connection 3 dots and port is a non tls port, which means it is failing ssl connection.  

[cdinet]

You can use nmap to verify the syslog server supports tls 1.2 and has the required ciphers it needs per kb91194 - see kb91115 for how to use nmap.

Otherwise a wireshark capture would show you it is not attempting tls connection, or the handshake is failing.

[jaklsdjfalsdfj]

I believe that was the earlier screen capture.
It's showing Syslog Connection Success now

[cdinet · Accepted solution]

Ok, can you stop apache and eventparser on epo, rename the eventparser and server log, then start them up.  Give everything a few min to ensure events are coming in, then upload the new logs to the SR.