[syslog-ng] Can you have multiple non-standard TCP ports as sources

30 Jul 2014

      Good Afternoon,

I am trying to setup a syslog-ng aggregation server and I can currently get it to listen on standard 601/514 ports.

source remote {
        udp(ip(0.0.0.0));
        tcp(ip(0.0.0.0) port(601) max-connections(200));
};

and

source remote_2 {
        tcp(ip(0.0.0.0) port(514) max-connections(200));
};

[root@ms30snllx opt]# netstat -pan |grep syslog
tcp        0      0 0.0.0.0:601                 0.0.0.0:*                   LISTEN      22113/syslog-ng
tcp        0      0 0.0.0.0:514                 0.0.0.0:*                   LISTEN      22113/syslog-ng

udp     3328      0 0.0.0.0:514                 0.0.0.0:*                               22113/syslog-ng

But when I add a new source and have it listen on 1514 for example:

source remote_3 {
        tcp(ip(0.0.0.0) port(1514) max-connections(200));
};

I don't get a listener on 1514 as well when looking via netstat .

Is there something I am missing?

Thanks in advance,

[syslog-ng] Can you have multiple non-standard TCP ports as sources

Smith, Jerry Don II