Ports used to download log files

Follow this procedure to customize the certificate files you use for secure connections to the Cloud Discovery Docker.

The command should produce a similar output to what's seen in the following screenshot. After you configured the log collector, if you are running behind a proxy, the log collector might have trouble sending data to Defender for Cloud Apps. This may happen because the log collector doesn't trust the proxy's root certificate authority and is not able to connect to Microsoft Defender for Cloud Apps to retrieve its configuration or upload the received logs.

For information on how to change the certificates used by the log collector for Syslog or FTP, and to resolve connectivity issues from the firewalls and proxies to the log collector, see Modify the log collector FTP configuration. Make sure you performed the necessary steps run Docker on a Windows or Linux machine and successfully download the Defender for Cloud Apps Docker image on the machine.

For more information, see Configure automatic log upload for continuous reports. Run the command on the Ubuntu host. It copies the certificate to a folder in the running container:. Go into the container, using the following command. It will open bash in the log collector container:. From a bash window inside the container, go to the Java jre folder. To avoid a version-related path error, use this command:.

Import the root certificate that you copied earlier, from the discovery folder into the Java KeyStore and define a password.

These services are installed by default on all versions of Windows in the Windows NT family when networking is present yes, yes-- it is technically possible to install Windows NT 4. Even versions of Windows that have "Roles and Features" install these services by default. Sign up to join this community. The best answers are voted up and rise to the top.

Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Podcast what if you could invest in your favorite developer? Who owns this outage? Building intelligent escalation chains for modern SRE.

For these parameters, both options are listed. Defines the logon user name for connecting to the cloud service. This must be an administrator contact with Log Export permissions.

This is the password for the specified user name. Runs the script in verbose mode, which displays progress messages. Verbose mode provides feedback on the script's progress, for example:. Defines the host name to connect to. This is specified in the script by default, so you would only need this option if you have edited the script to remove it, or if you have been given a different URL to connect to.

Defines the destination directory for the downloaded log files. If not specified, the files are downloaded into your current working directory. Checks the md5sum of each downloaded file. If the is a firewall configured between the primary server and a standby server, you need to open the following ports on the firewall:. These are the only ports that need to be opened for log shipping. As you will be between a firewall, you also want to create firewall exceptions for using SSMS tool as you will be using it to configure Log Shipping.

Other Windows services and applications may require additional ports to be opened.