Log Insight includes a built-in syslog server that is constantly active when the Log Insight service is running.

The syslog server listens on ports 514/TCP, 1514/TCP, and 514/UDP, and is ready to ingest log messages that are sent from other hosts. Messages that are ingested by the syslog server become searchable in the Log Insight Web user interface near real time. The maximum syslog message length that Log Insight accepts is 10 KB.