Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

Configure SIEM to be kemp syslog target but SIEM not receiving any syslog messages





Unable to receive logs from kemp on SIEM after configuring it as a syslog target on UDP/514


Product: Loadmaster

Version: Any

Platform: Any

Application: Any

Question/Problem Description:


Steps to Reproduce:  
Error Message:  
Defect Number:  
Enhancement Number:  



Confirmed with tcpdumps on the kemp to ensure kemp was sending outbound SYSLOG messages on UDP/514 to the SIEM host in question.

LoadMaster is confirmed to be sending outbound messages, however as UDP is connectionless we are unable to see any positive response from SIEM.

No logs are captured on SIEM side
Was unable to perform a similar capture on SIEM side.


Try using a standard linux server with rsyslog as destination and take tcpdump on server. LoadMaster was able to send syslogs to this linux server, pointing to an issue with the SIEM and how it was receiving logs.

Investigate with the SIEM vendor to confirm if any settings need to be configured on it.


Was this article helpful?
0 out of 0 found this helpful