06-24-2009 07:28 AM - edited 03-06-2019 06:26 AM
We have a Splunk box set up for syslog message retrieval (among other duties). We want to use a custom port other than UDP/514. Is it possible on a 6509-E running IOS 12.2 to change the destination syslog port?
Thanks in advance!
Shane
06-30-2009 11:57 AM
If you want to change the ports and run different instances of syslog monitor than you try this command switch(config)#logging host X.X.X.X transport udp port ## . This will change the port that the syslog messages are sent on and you will just have to figure out how to filter the different ports on the monitoring end.
07-01-2009 06:00 AM
Unfortunately, this command structure isn't available in IOS Version 12.2(33)SXH2a on a 6509-E. After logging host x.x.x.x I only have vrf and xml commands available. Thanks though.
Shane
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide