In Avaya Experience Portal 8.x, logs directed to external syslog servers are secured when leaving the Experience Portal system. The primary EPM sends audit logs, event logs, and alarms to a syslog server using secure connections.
The following diagram depicts the flow of logs from the Primary EPM to a remote syslog server.
Primary EPM server forwards logs to a local syslog server over UDP and Port 514 (configurable) - This is internal to the Primary EPM server.
Primary EPM syslog server then forwards the logs via TLS over port 6514 (configurable) to the external syslog server.