Return
-
Title
Which network port is used by Change Auditor Webhook integrations? -
Description
What incoming port is opened on the Change Auditor Coorindantors when doing a Webhook integration such as SIEM (Syslog, Splunk, IBM QRadar, Micro Focus Security ArcSight, Quest IT Security Search, or any other tool that accepts webhook notifications.) -
Resolution
All Change Auditor Coordinators are required to have open port 9000 for the use of webhook technology integrations. You can run the following command in a cmd prompt on each server to confirm that it is open and "LISTENING":
netstat -an | find "9000"
As shown in the screenshot below: -
Additional Information
https://support.quest.com/technical-documents/change-auditor/siem-integration-user-guide