To secure syslog communication from the primary EPM, the primary EPM uses the local EPM Server syslog software, to establish a secure connection to an external syslog server. EPM communicates with the local syslog server, which in turn establishes a secure connection to an external syslog server.
The remote syslog server must be configured to do the following:
Listen on port 6514 (Default syslog port for TLS communication).
Forward logs to the external syslog server using TLS over 6514.
Firewall on the remote syslog server must allow communication on port 6514.
Access the trusted Certificate Authority (CA) public certificate. This is used to configure security certificates on the remote syslog server on the EPM server to facilitate TLS handshaking.
Ensure that the PKI certificates are in place on the remote syslog server as per the syslog setup documentation.
