Open Collector Networking and Communication

The Open Collector requires a number of ports (both inbound and outbound) to be opened and accessible through your firewall in order to function correctly. These ports are listed on this page.

Direction	Port	Protocol	Source	Destination	Purpose
Outbound	443	HTTPS	Open Collector	`raw.githubusercontent.com`	Identify latest container versions.
Outbound	443	HTTPS	Open Collector	`get.docker.com`	Download docker repositories.
Outbound	443	HTTPS	Open Collector	`download.docker.com`	Allows for LRCTL installation of Open Collector
Outbound	443	HTTPS	Open Collector	`registry-1.docker.io`	Allows for LRCTL installation of Open Collector
Outbound	443	HTTPS	Open Collector	`auth.docker.io`	Allows for LRCTL installation of Open Collector
Outbound	443	HTTPS	Open Collector	`production.cloudflare.docker.com`	Allows for LRCTL installation of Open Collector
Outbound	514	TCP - Syslog	Open Collector	Windows System Monitor Agent	Syslog feed of data to LogRhythm SIEM.
Outbound	6514	TCP+TLS - Secure Syslog	Open Collector	Windows System Monitor Agent	Secure syslog feed of data to LogRhythm SIEM.
Outbound	8076	TCP - Influx/Vitals	Open Collector	Platform Manager	Data feed for Centralized Metrics (LogRhythm 7.5+ only).
Inbound	3000	HTTP	User machine	Open Collector	View Open Collector metrics in Grafana.
Inbound	22	SSH	User machine	Open Collector	Interact with Open Collector.
Inbound	5044	TCP - Lumberjack	Beats	Open Collector	Method to send data from Beats collected outside the Open Collector.
Outbound	443	HTTPS	Open Collector	34.74.126.177/32	Connection to JFrog Artifactory.
Outbound	443	HTTPS	Open Collector	35.243.144.59/32	Connection to JFrog Artifactory.
Outbound	443	HTTPS	Open Collector	104.196.37.135/32	Connection to JFrog Artifactory.
Outbound	443	HTTPS	Open Collector	104.196.197.41/32	Connection to JFrog Artifactory.
Outbound	443	HTTPS	Open Collector	35.237.73.210/32	Connection to JFrog Artifactory.
Outbound	443	HTTPS	Open Collector	`release.exabeam.com`	Connection to JFrog Artifactory.