Skip to content

Prerequisites

Before installing EventLogCentral, confirm that your environment meets the following requirements for both the EventLogCentral server and the EventLogAgent clients that will be deployed to monitored systems.

EventLogCentral Server requirements:

Requirement Details
Operating System Windows Server 2019 or newer
Browser Chrome, Firefox, Microsoft Edge, or Safari
Privileges Local administrator account required
Network Network connectivity to all managed EventLogAgent clients
IP Address Static IP address or DNS hostname recommended for production deployments

EventLogAgent client requirements:

Requirement Details
Operating System Windows Server 2016 or newer, Windows 10, or Windows 11
Privileges Local administrator account required for installation
Network Outbound connectivity to the EventLogCentral server on port 52966

Network requirements:

Port Protocol Direction Purpose
52965 HTTP Inbound to server EventLogCentral web UI (non-secure)
52966 HTTPS Inbound to server EventLogCentral web UI and agent communication (recommended)
514 UDP/TCP Outbound from agents Default syslog forwarding to LT Auditor MP or other targets
6514 TCP/TLS Outbound from agents Secure syslog forwarding to LT Auditor MP or other targets

[Your administrator should confirm the exact ports required in your environment and ensure firewall rules are in place before proceeding with installation.]

Download packages:

Two separate installation packages are required — one for the EventLogCentral server and one for the EventLogAgent clients:

Package Purpose
lta-mp-eventlogcentral.zip EventLogCentral server installation
lta-mp-eventlogagent.zip EventLogAgent client installation

[Your administrator should confirm where to obtain the current installation packages for your environment.]

SSL certificate considerations:

EventLogCentral automatically generates a self-signed TLS certificate during server installation. If self-signed certificates are used:

  • The public certificate file (ltaeventlog.cer) must be distributed to all EventLogAgent client machines so agents can trust the EventLogCentral server certificate
  • Alternatively, a custom TLS certificate can be installed on the server — see the Installing EventLogCentral Server article for details

If your organization requires a trusted CA-signed certificate rather than the auto-generated self-signed certificate, prepare the certificate before beginning installation.

LT Auditor MP requirements:

Requirement Details
LT Auditor MP Server Must be installed and running
Syslog Listener Must be active and configured to receive EventLogCentral forwarded events

[Your administrator should confirm the LT Auditor MP syslog listener port and protocol before configuring forwarding targets in EventLogCentral.]

Prerequisites checklist:

  • [ ] EventLogCentral server meets Windows Server 2019 or newer requirement
  • [ ] Static IP address or DNS hostname is assigned to the EventLogCentral server
  • [ ] Required firewall ports are open between agents and the EventLogCentral server
  • [ ] LT Auditor MP server is installed and running with syslog listener active
  • [ ] Both installation packages are available
  • [ ] SSL certificate approach is decided — self-signed or custom CA certificate
  • [ ] Local administrator credentials are available on the server and all agent machines

[Your administrator should complete this checklist before proceeding to the installation articles.]