How to change the default syslog port on an RSA Security Analytics Log Decoder

Issue

How to change the default syslog port on an RSA Security Analytics Log Decoder.

Resolution

To change the default syslog port on an RSA Security Analytics Log Decoder from TCP/UDP 514, follow the steps below:

1. In the Security Analytics UI, navigate to Administration -> Devices.
2. Select the Log Decoder device and click on View -> Explore.
3. Navigate to /decoder/config in the left pane.
4. Enter the parameter port=X in the capture.device.params field, where X is the desired port number.
5. Restart the Log Decoder service.

If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.

Internal Comments

UserName:shurtj
9/3/2014 2:04:31 PM - Technically Reviewed
Technically reviewed the article and changed the status to Copy Edited. Changed the article type from corrective to how to and modified the statements accordingly to abide by Primus best practices.

Product Details

RSA Security Analytics
RSA Security Analytics Log Decoder

Approval Reviewer Queue

Other Approval Group