Connexion to syslog server

[cionutspanu]

Hello,

I have an SA which sends logs to a syslog server. If the syslog connection goes down for 1h and then comes back up, does the SA resend all logs which he didn't send for the 1h downtime or does he only send new logs?

Thanks,
Diez

[JaiLaisram]

No,we do not resend.

any new events in event logs or changes in administrator logs(within that one hour) will be sent to the syslog server and since it is down it will not be received.

Once syslog server comes backup, syslog messages will be sent on the fly from SA whenever there is a new event in event logs or admin access logs.

Thanks,
Jai