Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 3839 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Syslog buffer?

FrankBarmentlo
Hello all,

I am new to configuring remote (sys)logging, and wanted to play around a bit.
Everything works, but I have one (probably easy) question:
What does the Remote Syslog Buffer do?
and what is recommended if I want to change this?

Remote Syslog Buffer

In this area you can change the buffer size of the remote syslog. The buffer size is the number of log lines kept in the buffer. Default is 1000. Click Apply to save your settings.


Kind regards,
Frank


This thread was automatically locked due to age.
Parents
  • 0
    What does the Remote Syslog Buffer do?
    Fairly obvious from the description in the Help/Admin Guide.  The usage would be if your UTM is churning out log entries faster than they can be sent to your Syslog server, you'd need a buffer, so syslog entries aren't skipped/lost.

    what is recommended if I want to change this
      The default of 10000, as increasing would use more memory.
Reply
  • 0
    What does the Remote Syslog Buffer do?
    Fairly obvious from the description in the Help/Admin Guide.  The usage would be if your UTM is churning out log entries faster than they can be sent to your Syslog server, you'd need a buffer, so syslog entries aren't skipped/lost.

    what is recommended if I want to change this
      The default of 10000, as increasing would use more memory.
Children
No Data