Hello,
I am new to syslog-ng. I have set up a syslog-ng ose 3.2.2 server and configured syslog on 64-bit RHEL 5 client servers to send all messages to the syslog-ng server over udp/11514 (client's syslog.conf: *.* @syslog-ngIP:11514) but no packet is received.
When I change the port on the syslog-ng server and on the client's syslog from udp/11514 to udp/514 all works. Verified that firewalls passing packets for both udp/514 and 11514 on the server and RHEL client and the port is not used by any other app.
I cannot figure out why the logs are not happening when changing the port to udp/11514 from default? Is there any global options I should set or any change to my source statements?
Here are the global options and sources definitions:
options {
time_reopen (10);
long_hostnames (off);
owner("root");
group("root");
perm(0600);
dir_perm(0755);
use_dns (yes);
use_fqdn (no);
create_dirs (yes);
keep_hostname (no);
};
source:
########### Define Sources
### Internal
source s_local_sys {
file ("/proc/kmsg" program_override("kernel: "));
unix-stream ("/dev/log");
internal();};
### External or remote:
# For Server Groups
source s_RHEL5_udp { udp(port(11514));};
# For all other single hosts:
source s_remote_udp { udp(port(514));};
Thanks in advance for your help.
Medi