2

I am curious if the server forwarding said logs keeps a local copy in addition to forwarding, or if all logs it generates are immediately forwarded to the collector? I cannot find detailed information about this in any setup procedure. It appears that the forwarding machine keeps a copy by default. I am trying to setup a centralized logging server in order to keep local disk space free of large log files.

Referenced:

Improve this question

1 Answer 1

Reset to default
1

Event forwarding doesn't do anything with the local log content. The local logs remain and are aged out pursuant to the event log overwrite policy.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .