Port for log collection from VMWare Vcenter

[IgorVoznyuk]

What port uses RSA Netwitness for collect logs from the VMWare Vcenter when using VMware Collector?

There is nothing about this in the "VMware vCenter Server Event Source Log Configuration Guide" manual

[JoshRandall]

Igor Voznyuk

That log collection method adds a rsyslog configuration to the vCenter Server, which then pushes its logs via syslog from the VCSA to the log collector.

This results in a random high number port being used on the VCSA and the syslog port on the log collector (514 or 6514 if using SSL/TLS),