Home » Setup EventLog Analyzer » Prerequisites

Prerequisites - Distributed Edition Admin Server


Before starting EventLog Analyzer in your environment, ensure that the following are taken care of.

Prerequisites applicable for EventLog Analyzer version 8.0 (Build 8010) onwards

Before starting EventLog Analyzer in your environment, ensure that the following are taken care of.

What are the ports required for EventLog Analyzer?

EventLog Analyzer requires the following ports to be free for web server, syslog, and PostgreSQL:

Port Numbers

Ports Usage

Description

8400

Web server port

This is the default web server port used by EventLog Analyzer. This port is used for connecting to EventLog Analyzer using a web browser. You can change this port during installation.

513, 514

Syslog port

These are the default Syslog listener ports. Ensure that the hosts are configured to send Syslogs to any one of these ports.

33335

PostgreSQL/MySQL database port

This is the port used for connecting to the PostgreSQL/MySQL database in EventLog Analyzer.

 

 

How to change the default ports used by EventLog Analyzer?

Procedure to change the default web server port:

  • Edit the server.xml file present in <EventLog Analyzer Home>/conf directory.

<Connector acceptCount="100" connectionTimeout="20000"
debug="3" disableUploadTimeout="true" enableLookups="false"
maxSpareThreads="75" maxThreads="150" minSpareThreads="25"
port="8400" redirectPort="8443"/>

  • Change the port number in the following line to the desired port number:
    port="8400"
  • Save the file and restart the server.

Procedure to change the default UDP port for Syslog:

By default, EventLog Analyzer listens to the UDP ports 513 and 514 for syslogs.

  • Stop the EventLog Analyzer service.
  • Edit the file runsec.bat, which is located at <EventLog Analyzer Home>\bin folder.
  • Edit (in notepad) the entry "bin\SysEvtCol.exe -loglevel 2 -port 513 514" for default port change and remove ports that are not required. For example, if you do not want port 514 as default, the edited line will look like: "bin\SysEvtCol.exe -loglevel 2 -port 513".
  • In case, you do not want any default port to be listening for Syslog, remove the "-port" option in the above line.
  • After saving the runsec.bat, restart the EventLog Analyzer service/server for the changes to take effect.
Procedure to change the default PostgreSQL port:
  • Edit the database_params.conf file located under <EventLog Analyzer Home>\conf directory .
  • Change the port number in the following line to the desired port number:
    url=jdbc:postgresql://localhost:33335/eventlog?stringtype=unspecified
  • Save the file and restart the server.

Permission to access PostgreSQL to troubleshoot

  • Open the pg_hba.conf file which is under <EventLog Analyzer Home>\pgsql\data directory and add the line

host all all <IP address of the remote machine to be used to trouble shoot>/32 trust

after the line

host all all 127.0.0.1/32 trust

and save the file.

    # TYPE DATABASE USER ADDRESS METHOD

    # IPv4 local connections:

    host all all 127.0.0.1/32 trust

    # IPv6 local connections:

    host all all ::1/128 trust

    to

    # TYPE DATABASE USER ADDRESS METHOD

    # IPv4 local connections:

    host all all 127.0.0.1/32 trust

    host all all <IP address of the remote machine to be used to trouble shoot>/32 trust

    # IPv6 local connections:

    host all all ::1/128 trust

     

Prerequisites applicable for EventLog Analyzer version 8.0 (Build 8000) or earlier

 

Changing Default Ports

Changing the default MySQL port:

  1. Edit the mysql-ds.xml file present in the <EventLog Analyzer Home>/server/default/deploy directory.

  2. Change the port number in the following line to the desired port number:
    <connection-url>jdbc:mysql://localhost:33336/eventlog</connection-url>

  3. Save the file and restart the server.

Changing the default web server port:

  1. Edit the sample-bindings.xml file present in the <EventLog Analyzer Home>/server/default/conf directory.

  2. Change the port number in the following line to the desired port number:
    <binding port="8400"/>

  3. Save the file and restart the server.

 

 
Copyright © 2013, ZOHO Corp. All Rights Reserved.
ManageEngine