Symptom:
Guaranteed delivery can be a problem for direct collection of syslogs using the syslog Listener's UDP protocol.
Solution:
Consider employing a syslog local collection mechanism as a workaround for the potential problems with guaranteed delivery. That is, configure a syslog listener on an agent installed with the syslog event source.
Note: Use the well-known port for syslog, port 514, only if the agent is running as root. If the agent is running as a lower-privileged user, which is recommended, assign a private port. Private ports are those from 49152 through 65535.
| Copyright © 2010 CA. All rights reserved. | Email CA about this topic |