List of Ports

This section documents various ports that are used in LogScale.

Inbound (Incoming Traffic)

The following table lists inbound ports used by LogScale:

Port Envar Protocol Description
443 N/A TCP (HTTPS) Primary web UI and API (TLS)
80 N/A TCP (HTTP) Web UI/API (often redirects to 443)
8080 HUMIO_PORT (not set by default) TCP Default HTTP port (non-containerized/self-managed). Everything by default: UI, GraphQL, REST, HEC/HTTP ingest, Elasticsearch bulk API, /metrics, inter-node cluster HTTP
8443 N/A TCP Default HTTPS port (non-containerized/self-managed)
9200 ELASTIC_PORT (not set by default) TCP Elasticsearch-compatible API (if enabled)
514 N/A UDP/TCP Syslog ingestion
601 N/A TCP Syslog over TCP (reliable)
6514 N/A TCP Syslog over TLS
8080 PROMETHEUS_METRICS_PORT (not set by default) N/A Splits /metrics scrape endpoint onto its own socket.
22 N/A SSH For SSH so that a terminal and shell can connect and configure the different components
5123 N/A TCP Requests to PDF Render Service

Outbound (Outgoing traffic)

Port Envar Protocol Description
3129 HTTP_PROXY_PORT (default 3129) HTTP Sets the port for HTTP proxy configuration
587 SMTP_PORT (not set by default) SMTP Sets the port number when using an SMTP server for emails

Cluster Communication (Internal)

The following table lists ports used by LogScale for cluster communication:

Port Env var Protocol Description
8080 N/A TCP Inter-node HTTP communication
9300 N/A TCP Internal cluster communication
2181 N/A TCP Zookeeper (no longer supported)
9092 See KAFKA_SERVERS and KAFKA_BOOTSTRAP_SERVERS (not set by default) TCP Kafka (if used for ingest)