Network Management

Troubleshoot SolarWinds Syslog Service issues

This article describes how to troubleshoot NPM Syslog Service issues, such as in receiving Syslog messages from devices configured to send Syslog messages to your SolarWinds Platform server.

First published date

10/22/2018 4:08 PM

Last published date

7/15/2025 10:30 PM

Overview

The steps below discuss how to verify the Syslog service is running on the SolarWinds Platform server, how to verify the port, and how to verify Syslog packets are reaching it.

Product section

Orion Platform

Resolution

  1. Log in to your SolarWinds Platform server using an account with administrative privileges.
  2. Click Start > Control Panel > Administrative Tools > Services.
  3. Confirm that the SolarWinds Syslog Service is the only Syslog service currently running.
  4. Confirm that the SolarWinds Syslog Service is the only service on port 514, using the following procedure:
    1. Open a Windows command prompt and run it as administrator.
    2. Enter netstat -aob.
    3. Confirm that there are no other connections on port 514.
  5. Confirm that all installed firewalls, including Windows Firewall and any third-party installed firewalls, allow traffic to and from your SolarWinds Platform server on port 514.
  6. Confirm that your SolarWinds Platform server can receive Syslog messages, you can use the Kiwi Syslog generator free tool, as follows:
    1. Download and install the free Kiwi Syslog Server.
    2. Generate Syslog messages with the Kiwi Syslog Server, and send them to your SolarWinds Platform server. For more information, see the Kiwi Syslog Gen documentation available in the download.
  7. Confirm that the devices from which you want to receive Syslog messages are monitored and configured to send Syslog messages to the correct IP address for your SolarWinds Platform server.

*As an alternate method, you can also verify Syslog packets are reaching the server with Wireshark.