Back to HaCluster section | Centralized logs with HaCluster
The load-balancer that receives logs from proxies can resend logs to your dedicated syslog server.
By default, events are sent using UDP protocol, if your syslog server use TCP, turn on the “Use TCP Port” option.
The syslog service listens the 514 port, if your remote syslog server uses a different one, change it in the listen port field.
By default, local logs are stored using the same way of “Legal logs”.
In the case of using a remote syslog server, logs are duplicated.
You can decide to remove any generated events. In this case, turn on the option “Remove Local events” and set the Max size of a log before deleting it.