Ports

This section describes the ports used by LogLogic® Universal Collector and LogLogic® Management Center Agent.

LogLogic® Universal Collector

To use LogLogic® Universal Collector along with TIBCO LogLogic® Log Management Intelligence, you must open specific TCP ports.

Ports Direction Use
5515 Outbound

For secured connection with LogLogic® LMI. (although default can be configured)

5516 Outbound For nonauthenticated and nonencrypted connection with LogLogic® LMI.
514 Inbound Default port for Syslog collector. You can configure this from GUI.
514 Outbound Default port for Syslog forwarder. You can configure this from GUI.
Note: Ensure that LogLogic® Universal Collector - LogLogic® LMI network connection is not blocked by a firewall.

TIBCO LogLogic® Management Center Agent

The LogLogic® Management Center Agent communicates with Management Center about the Asset's features. To use LogLogic® Universal Collector along with the LogLogic® Management Center, you must open specific TCP ports that are used by the LogLogic® Management Center Agent. These are the default ports, but you can configure them at any time.

For details about configuring LogLogic® Management Center ports, see Installing Universal Collector.

Ports Direction Use
21616 Outbound

Port number used by LogLogic® Management Center Agent to notify LogLogic® Management Center about the changes.

2098 Inbound

RMI Server Port number. The default value is 2098. This must be a number between 1024 to 65535.

2099 Inbound

RMI Registry Port number. The default value is 2099. This must be a number between 1024 to 65535.

Note: Ensure that LogLogic® Universal Collector - LogLogic® Management Center network connection is not blocked by a firewall.

Windows Logs

The following table lists the ports used to collect the Windows logs:

Ports Direction Use
135 Inbound

Remote Procedure Call service, used to remotely manage services

445 Inbound Server Message Block (SMB), used for data transfer

LogLogic® Universal Collector uses the dynamic ports to collect logs from Windows.

For Windows Server 2008 and later versions, and Windows Vista and later versions, the default dynamic port range is as follows:

  • Start port: 49152
  • End port: 65535

If your computer network environment uses only Windows Server 2012, Windows Server 2008 R2, Windows Server 2008, Windows 2016, Windows 10, Windows 7, or Windows Vista, you must enable connectivity over the high port range of 49152 through 65535.

If your computer network environment uses only versions of Windows earlier than Windows Server 2008 and Windows Vista, you must enable connectivity over the low port range of 1025 through 5000.

For more details see https://support.microsoft.com.