...
5.The format is tcp|udp|ssl://log_insight-host:514|1514, where log_insight-hostis the IP address or host name of the Log Insight virtual appliance. Next steps to be followed are:
NOTE : Use port 514 for UDP and TCP communication, and port 1514 for SSL protocol.
...
5. Click OK.
VERIFICATION OF CONFIGURATION
Verification can be done either from CCE Server or from UI.
Using UI
STEP 1: Log in to UI >> SYSTEM
STEP 2: >> LOGS AND FLOWS COLLECTION STATUS.
STEP 3: >>Inside SOURCE DEVICE IP, IP will reflect.
Using CCE SERVER
“sudo tcpdump -i any host 514 (for logs) and 9995 (for flows) and host <IP address> -AAA” command should be running on the CCE server to check whether or not we are getting logs.