Hi!

Let me clarify.
The purpose of disk based buffering is to prevent the lost of logs due to what factors? 
It does prevent lost of logs due to restarting the syslog-ng right? 

Buffering is done on the syslog-ng server end right?

Yours Sincerely,
Delon Lee


On Mon, 7 May 2018 at 23:18 Nagy, Gábor <gabor.nagy@balabit.com> wrote:
Hello Delon Lee!

You don't need the client to be syslog-ng for disk based buffering on the host, i.e. you only need syslog-ng where you would like to do the buffering.
It should work with rsyslog as a client and syslog-ng as a host.

Regards,
Gabor

On Mon, May 7, 2018 at 5:02 PM, Delon Lee Di Lun <lee.delon2005@gmail.com> wrote:
Hi, 

I read that syslog-ng can be setup to use disk based with flow control with the client to prevent lost of logs. 

However I was just thinking, how does this mechanism works? Does the client have to be using syslog-ng? Will it work if the client is using rsyslog? Native appliance that purely support syslog? 

Yours Sincerely,
Delon Lee

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq