My question might be weird.
I change the management port on one of endpoint(universal forwarder)from multiple forwarders but still I receiving logs & client report to DS. Why it works correctly?
The management port of the universal forwarder doesn't affect any other settings on that forwarder, including (but not limited to) where it forwards its logs, where it phones home as a deployment client, etc.
The management port only affects which port you would need to use to talk to your universal forwarder, for REST API calls, for instance.
The management port of the universal forwarder doesn't affect any other settings on that forwarder, including (but not limited to) where it forwards its logs, where it phones home as a deployment client, etc.
The management port only affects which port you would need to use to talk to your universal forwarder, for REST API calls, for instance.