https://lazzarotto.dev/blog/en/tags/linux/Recent content in Linux on Marco LazzarottoHugoen-uspostmaster@mlazzarotto.it (Marco Lazzarotto)postmaster@mlazzarotto.it (Marco Lazzarotto)Marco LazzarottoSun, 28 Nov 2021 00:00:00 +0200https://lazzarotto.dev/blog/en/centos-8-how-to-bind-logstash-on-port-514/Sun, 28 Nov 2021 00:00:00 +0200postmaster@mlazzarotto.it (Marco Lazzarotto)https://lazzarotto.dev/blog/en/centos-8-how-to-bind-logstash-on-port-514/<p>The situation: you need to send logs from an old piece of equipment to <a class="link" href="https://www.elastic.co/logstash/" target="_blank" rel="noopener" >logstash</a> running on a <strong>CentOS 8</strong>, for storing your logs on ElasticSearch.</p> <h2 id="the-problem">The problem </h2><p>The device is old and doesn&rsquo;t support changing the default syslog port from <strong>514/udp</strong> to something different, like port <strong>5140/udp</strong>. Unfortunately this can happen, for example on virtual appliances like <strong>ZeroShell</strong>, where there&rsquo;s no way to change the syslog port from the default one, but there&rsquo;s a quick solution to this!</p>