Syslog input, open only udp port

[Sebastian_Herrera]

Hello, i want to know if there is any possibility to open only the udp port for syslog. Now when i configure it open both tcp and udp.

Regards

[pge (Peter Garlic)]

Hi @Sebastian_Herrera
try this on input configuration file

input {
    udp {   
         type => "syslog" 
         port => 514 
    } 
} 

if you have more than one interface you can specify also the ip.

Example:

input {
    udp {   
         type => "syslog" 
         port => 514 
         host => "192.168.1.100"
    } 
}