After installing NetVizura EventLog, Syslog messages are written and read from http://localhost:9200 by default. 

To change the address of the elastic server, go to  > Settings > EventLog Settings > Configuration. In the Elasticsearch database options section, you can set new values for your Elastic server.  

This setup will write and read messages from http://172.16.4.71:9200 without authentication.

To specify a different protocol, you should add the protocol in front of the IP address in the Remote IP address field (e.g. https://172.16.4.71). We also support DNS names instead of IP addresses and authentication with username and password. 

This setup will connect to the elastic cloud on https://my-deployment.es.eu-south-1.aws.elastic-cloud.com: 9243 with the correct username and password for authentication. Port 9243 will be used because it is the default port for the HTTP protocol, even though it is not specified in the Port number field.