Hello Syslog Experts,<br><br>I have a question on the syslog-ng. I use syslog-ng 3.0.2. I tried to setup syslog-ng to forward syslog messages to other host. I tested 2 destination driver, udp() and syslog() as per below.<br>
<br>test 1: udp(&quot;10.x.x.x&quot; port(514))<br><br>test 2: syslog(&quot;10.x.x.x&quot; transport(&quot;udp&quot;) port(514));<br>
<br>I found that with udp() driver, syslog-ng just forwards the incoming log messages to external host. No problem. However, with the syslog() driver, I found that syslog-ng generate 2 udp packets<br><br>packet1... contains only 4 bytes in payload, I think this is message length?? <br>
packet2... is the actual syslog udp packet.<br><br>Is it possible to disable the first packet? this just create the overhead unnecessarily? Please advise. Thanks.<br><br>Cheers,<br><br>