Hello Delon Lee!

You don't need the client to be syslog-ng for disk based buffering on the host, i.e. you only need syslog-ng where you would like to do the buffering.

It should work with rsyslog as a client and syslog-ng as a host.

Regards,

Gabor

On Mon, May 7, 2018 at 5:02 PM, Delon Lee Di Lun <lee.delon2005@gmail.com> wrote:

Hi,

I read that syslog-ng can be setup to use disk based with flow control with the client to prevent lost of logs.

However I was just thinking, how does this mechanism works? Does the client have to be using syslog-ng? Will it work if the client is using rsyslog? Native appliance that purely support syslog?

Yours Sincerely,
Delon Lee

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq