To secure syslog communication from the primary EPM, the primary EPM uses the local EPM Server syslog software, to establish a secure connection to an external syslog server. EPM communicates with the local syslog server, which in turn establishes a secure connection to an external syslog server.

The remote syslog server must be configured to do the following:

• Listen on port 6514 (Default syslog port for TLS communication).

• Forward logs to the external syslog server using TLS over 6514.

  • Firewall on the remote syslog server must allow communication on port 6514.

• Access the trusted Certificate Authority (CA) public certificate. This is used to configure security certificates on the remote syslog server on the EPM server to facilitate TLS handshaking.

  • Ensure that the PKI certificates are in place on the remote syslog server as per the syslog setup documentation.