I am trying to set up a syslog-ng server on Linux (not in domain) and send the logs to a domain joined PRTG server on a device probe. (It's just default settings at the moment).
The problem is that I keep getting connection refused (111) from the syslog-ng server and when I run nmap on the prtg destination, I don't see port 514 as open, even though it should be running.
However when I run netstat -anob on the Windows machine with the Device probe I can see something is using the port, even when I tested with another port, that also came up.
I have checked Microsoft Firewall and Firewalld on Linux, but there should be nothing blocking the ports.
So I am kind of stumped as to what to do next, I tried watching the video they provided but there it just works without a hitch.
Is it because that the machine NEEDS to be in the domain, before prtg even wants something to do with it or am I missing something?