Syslog input, open only udp port


(Sebastian Herrera) #1

Hello, i want to know if there is any possibility to open only the udp port for syslog. Now when i configure it open both tcp and udp.

Regards


(Peter Garlic) #2

Hi @Sebastian_Herrera
try this on input configuration file

input {
    udp {   
         type => "syslog" 
         port => 514 
    } 
} 

if you have more than one interface you can specify also the ip.

Example:

input {
    udp {   
         type => "syslog" 
         port => 514 
         host => "192.168.1.100"
    } 
}

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.