What is the minimum configuration that needs to be done to have the Generic Syslog Receiver up and running?
Hi Ben,
I thought that additional configuration was needed since I saw Syslog data entering in Wireshark while the element tables stayed empty. I wasn’t aware that Wireshark can see inbound data before it’s blocked by the firewall as mentioned in another topic https://community.dataminer.services/question/troubleshooting-network-traffic-with-wireshark/
After configuring the inbound firewall rule the tables were filled in.
Solution to this question was provided in another post:
Make sure you have checked that Windows firewall is not blocking external traffic on that port. You can do so by adding an inbound rule on the UDP Port 514 (the syslog port).
Wireshark's capturing engine, WinPcap, actually gets access to incoming packets before Windows firewall. So it makes sense that you would see it in Wireshark yet still be blocked from the DMA/driver.
Jens, not sure if I understand the question. I assume you are talking about using the Generic Syslog Receiver driver for DataMiner, but when you say ‘minimum configuration’, what are you referring to? The set-up of the driver?