You want to collect logs from the Windows Vista / Windows 2008 / Windows 2008 R2 machine using Windows Visa/ Windows 2008 Collector but the default port used by winrm are already in use.
The default ports for winrm 1.1 are http port 80 and https port 443 The default ports for winrm 2.x are http port 5985 and https port 5986
Symptoms Unable to create Winrm listener on port 80, 443, 5985, or 5986 as these ports are already in use
Winrm 1.1 and earlier use default HTTP port 80 and default HTTPS port 443 and these ports are commonly used by IIS. Winrm 2.x use default HTTP port 5985 and default HTTPS port 5986.
You want to collect windows logs using Windows Vista /Windows 2008/Windows 2008 R2 collector which requires winrm listener to be enabled and winrm quickconfig or winrm quickconfig -transport:https enable listener with default ports.
For example you want to create winrm listener with custom HTTP port 8888. Run the below command to create this listener: