https://de.cemle.com/post/which-default-port-do-you-need-to-allow-on-any-internal-firewalls-to-allow-a-host-to-send-messages-by-syslog-to-a-siem-management-server
Which default port do you need to allow on any internal firewalls to allow a host to send messages by syslog to a SIEM management server?