In addition to the default port 514, we'd like to listen to the RSA Security Analytics Log Decoder on another port.
How does it work?
I'm not sure that how we can set it on LD.
But you can set it on log collector..under>config>event sources>syslog>choose udp or tcp>then mention whatever port you want and it would start listening syslogs from that port what you mentioned.
Sent by LG G3
Date:Sat, 31 Oct, 2015 at 3:52
Subject:[RSA Security Analytics] - How to add an additional syslog port on an RSA Security Analytics Log Decoder
How to add an additional syslog port on an RSA Security Analytics Log Decoder
created by davme in RSA Security Analytics - View the full discussion
Reply to this message by replying to this email, or go to the message on ECN Start a new discussion in RSA Security Analytics by email or at ECN Following RSA Security Analytics in these streams: Inbox
Realy a great solution. But works only in remote collection mode.
Retrieving data ...