Prerequisites

Before setting up EventLog Analyzer in your enterprise, ensure that the following are taken care of.

Ports to be freed

EventLog Analyzer requires the following ports to be free:

Port Numbers	Usage
8400	This is the default web server port. You will connect to the EventLog Analyzer from a web browser using this port number. You may change this port during installation.
513, 514	These are the default listener ports. It is recommended that you configure hosts to send event logs to any one of these ports.
33335	This is the port used to connect to the MySQL database in EventLog Analyzer.

EventLog Analyzer will be using the following ports:

Port Numbers	Usage
135, 445, 139	Windows services DCOM, WMI, RPC will be using these ports and EventLog Analyzer in turn use these services to collect logs from Windows machines in default mode (Non-SysLog mode).

EventLog Analyzer will be using the following ports:

Port Numbers	Usage
5000, 5001	EventLog Analyzer will be using these UDP ports internally for agent to server communication. Ensure that the ports are free and not occupied by other local application running in the machine. These ports need not to opened in the Firewall.

Port Numbers

Usage

5000, 5001

EventLog Analyzer will be using these UDP ports internally for agent to server communication.

Ensure that the ports are free and not occupied by other local application running in the machine.

These ports need not to opened in the Firewall.

Look up Changing Default Ports for help on changing the default ports used by EventLog Analyzer

Apart from the System Requirements, the following setup would ensure optimal performance from EventLog Analyzer.

Run EventLog Analyzer on a separate, dedicated PC or server. The software is resource-intensive, and a busy processor may cause problems in collecting event logs.
Use the MySQL pre-bundled with EventLog Analyzer that runs on port 33335. You need not start another separate instance of MySQL.
As mentioned in the pre-requisites, for better performance, you can replace the existing MySQL parameters.

Changing the default MySQL port:

Edit the mysql-ds.xml file present in the <EventLogAnalyzer_Home>/server/default/deploy directory.
Change the port number in the following line to the desired port number:
<connection-url>jdbc:mysql://localhost:33335/eventlog</connection-url>
Save the file and restart the server.

Changing the default web server port:

Edit the sample-bindings.xml file present in the <EventLogAnalyzer_Home>/server/default/conf directory.
Change the port number in the following line to the desired port number:
<binding port="8400"/>
Save the file and restart the server.

ManageEngine