000026257 - How to change the default syslog port on an RSA Security Analytics Log Decoder

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000026257
Applies ToRSA Security Analytics
RSA Security Analytics Log Decoder
IssueHow to change the default syslog port on an RSA Security Analytics Log Decoder.
Resolution

To change the default syslog port on an RSA Security Analytics Log Decoder from TCP/UDP 514, follow the steps below:


  1. In the Security Analytics UI, navigate to Administration -> Devices.
  2. Select the Log Decoder device and click on View -> Explore.
  3. Navigate to /decoder/config in the left pane.
  4. Enter the parameter port=X in the capture.device.params field, where X is the desired port number.
  5. Restart the Log Decoder service.

 


If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.

Legacy Article IDa67615

Attachments

    Outcomes