You can forward events and logs from syslog and VMware Aria Operations for Logs sources.

Important:

The Cloud Proxy is deprecated. You can continue to use your existing Cloud Proxy configurations, but there will be no new feature updates to the Cloud Proxy.

Port Requirements

Before you configure event forwarding, become familiar with the port requirements for Cloud Proxy and Cloud Native Collector.

Source Destination Ports Protocol Service Description
Standard system log Cloud Proxy or Cloud Native Collector 514 TCP,UDP Syslog data over TCP or UDP
Standard system log Cloud Proxy or Cloud Native Collector 6514 SSL Syslog data over SSL
ESXi hosts in vCenter Cloud Proxy or Cloud Native Collector 1514 SSL Syslog data over SSL
VMware Aria Operations for Logs Agents or Server Cloud Proxy or Cloud Native Collector 9000 HTTP VMware Aria Operations for Logs log data in JSON format (CFAPI)
VMware Aria Operations for Logs Agents or Server Remote Cloud Proxy 9543 HTTPS VMware Aria Operations for Logs log data in JSON format (CFAPI)
Cloud Proxy or Cloud Native Collector VMware Aria Operations for Logs (SaaS) 443 TCP VMware Aria Operations for Logs (SaaS) data over HTTPS
Cloud Proxy or Cloud Native Collector vCenter endpoint 80 HTTP vCenter configuration requests over HTTP
Cloud Proxy or Cloud Native Collector vCenter endpoint 443 HTTPS vCenter configuration requests over HTTPS
Cloud Proxy or Cloud Native Collector DNS 53 TCP, UDP DNS: name resolution service
Cloud Proxy or Cloud Native Collector NTP Server 123 UDP NTPD: Provides NTP time synchronization. The port is open only if you select NTP time synchronization.
Admin workstation Cloud Proxy or Cloud Native Collector 22 TCP SSH: Secure Shell connectivity