Custom Syslog (Syslog Tagged)

Deployment

The recommended practice for all syslog data is to implement Syslog Tagging.

In this model, your source system does not send data the default Syslog ports. Instead the following process is used:

1. Create a custom syslog receipt port on the HyperCollector and assign a tag.
2. Configure your local system to send the syslog data specific to a source to that port on those HyperCollector(s).

It is recommended to use Syslog/TCP for transmission at a minimum if at all achievable. Using a modification of the Ansible deployed Rsyslog configuration is also recommended.

The example below adds Proxmox servers as TCP and UDP on port 12206. You would then configure your Proxmox servers to send their syslog traffic to port 12206 on the HyperCollector instead of UDP/514.

Do not use 12201 or 12205 as they are reserved for the automation assisted HyperSec Linux deployment.