ASM Logging Profile sending to port 514 when it is not set

[WithF5]

Hi,

I have created a Security Logging Profile where in remote storage configuration, I have set a different port than 514. F5 is sending the logs to the desired port but it is also sending to 514 port. I checked the whole bigip.conf configuration and other .conf files as well and I didn't find any parameter where is set with the 514 port. TCPdump is capturing F5 sending to 514 port and you can see the connection in show sys conn as well. Does anyone have seem the same behaviour? v13.1.0.8

Thanks.

[Andrew-F5]

Do you have syslog configured on your F5 at System  ››  Logs : Configuration : Remote Logging?

If you configure syslog there and use the default port of 514 you will never see the port listed in the .conf files.