Hello everyone,
I'm still quite new to the Elastic world and currently managing the PoC at our company. The environment is running quite well so far, and various systems are connected. However, I have the following problem with Syslog.
I want to run both the custom UDP log integration and the Fortigate Syslog integration on port 514 on a single agent. Unfortunately, all Syslog messages are currently being directed only to the custom UDP log integration. The Fortigate Syslog integration is completely ignored.
Does anyone have any tips on how to configure Syslog for multiple different systems without using a new port for each system? Ideally, I'd like everything to run over port 514 on a single agent.
Thx
Max