Default Syslog

Deployment

Default Syslog logs can be directed to the HyperCollector for receipt and on-processing. Data send to these ports is combined with any other syslog traffic sent to this port and is not tagged or separated. This is intended as a 'catch-all' sink for this data if other, more optimised and deliberate approaches are not available.

This approach is also available for non Linux, Unix sources. However, a syslog tagged approach is still recommended for these systems.

The default ports for syslog are:

• UDP/514
• TCP/601