Default Listening Port 513 has already been occupied . So add a new port to listen for event logs.
I have edited runSEC.sh, restarted ELA and it will not listen on 514 like I would like it to. It still shows trying to listen on UDP 513. This is installed on a fresh install of Ubuntu 14.04.1 LTS running in VMWare. Below are the netstat results while the ELA service is running and the output of the runSEC.sh file.
server:/var/log$ sudo netstat -anp -pudp
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
udp 0 0 0.0.0.0:5000 0.0.0.0:* 10999/java
udp 0 0 0.0.0.0:5001 0.0.0.0:* 10999/java
udp 0 0 0.0.0.0:5002 0.0.0.0:* 10999/java
udp6 0 0 ::1:43815 ::1:43815 ESTABLISHED 11032/postgres
server:/opt/ManageEngine/EventLog/bin$ cat runSEC.sh
test -d logs
if [ $? -ne 0 ]; then
mkdir -p logs
bin/SysEvtCol -loglevel 2 -port 514 $*
I would appreciate any help. Thank you.