I am curious if the server forwarding said logs keeps a local copy in addition to forwarding, or if all logs it generates are immediately forwarded to the collector? I cannot find detailed information about this in any setup procedure. It appears that the forwarding machine keeps a copy by default. I am trying to setup a centralized logging server in order to keep local disk space free of large log files.



Event forwarding doesn't do anything with the local log content. The local logs remain and are aged out pursuant to the event log overwrite policy.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.