question about eventlog analyzer
I have eventlog analyzer and syslog forwarder on separated machines. I use VDS port mirroring for traffic mirroring of eventlog analyzer to syslog forwarder. I use syslog forwarder for forwarding syslog traffic of eventlog analyzer to a syslog collector. I add server ip of syslog collector and eventlog analyzer. I see traffic of eventlog analyzer by wireshark to syslog forwarder but i dont see traffic of syslog forwarder to syslog collector. it means syslog forwarder cant send syslog to syslog collector. what should i do now??????