Help Document

Introduction

Getting started

Pre-logging setup

Logging setup

Product features

Admin settings

Product settings

CSP PORTS AND DOMAINS

PORTS:

PORT DESCRIPTION
8055 HTTP
8056 HTTPS
587 TLS SMTP
465 SSL SMTP
1470 TCP (SYSLOG)
513,514 UDP (SYSLOG)
33355 PGSQL

Azure:

DOMAIN DESCRIPTION
*.monitoring.azure.com
*.monitoring.core.windows.net
*.blob.core.windows.net
Domains used for collecting NSG and activity logs.
*.azure-api.net Domain used for various api services in azure.

For more domain related information refer - AZURE DOCUMENTATION.

SALES FORCE:

DOMAINS DESCRIPTION
*.logs.sfdc.net
*.cloud.sfdc.net
Domains used for collecting event logs and audit logs.
*.salesforce.com Domain covers various salesforce APIs required for accessing salesforce data and services.

For more domain related information refer - SALESFORCE DOCUMENTATION

AWS:

DOMAIN DESCRIPTION
s3.amazonaws.com logs.amazonaws.com Domains used for collecting ELB logs.
*.cloudtrail.amazonaws.com Domains used for collecting cloud trail logs.
*s3.amazonaws.com Domains used for collecting s3 logs
*.amazonaws.com Domains used for various aws api.
*.amazonaws.com.cn Domain specifies to aws China region

GCP:

DOMAIN DESCRIPTION
*.googleapis.com This is a wildcard domain that covers all GCP API endpoints including logging.googleapis.com( domain used for log collection and accessing logs) and monitoring.googleapis.com (domain used for accessing GCP monitoring services and metrics).
NOTE :
  1. The SYSLOG and SMTP ports mentioned above are commonly used default ports for these services. The specific ports to be used may vary depending on your configuration and requirements. These ports can be user-defined or modified based on your setup.
  2. The `*` is a wildcard character, which means that the specific endpoint may vary based on the region and service you are using.
  3. Make sure to allow outbound traffic to these domains in your firewall settings to ensure proper communication. Additionally, ensure that there are no network security group or firewall rules blocking outbound traffic to these domains.