ERs 55xx Syslog Behaviour

[raycowburn]

Hi, I have a question from the security group of a customer and I do not know the answer, hopefully someone on here can help.

On an ERS55xx running 6.0.x code and there is a syslog server configured what happens when Syslog is set to LATCH and a new syslog message is generated?

Does the on device buffer stay unchanged (LATCHED) and the new message gets dropped or does the On Board buffer remain unchanged but the new syslog message gets forwarded to the syslog server?

Thanks,

Ray

[sidneyd]

The log setting of latch, only affects the local log operation. Syslog messages will be sent irrespective of the state if the local log has become full if it is set to latch.

Sidney