I want to setup my Kiwi Syslog server to store and forward. I have looked at the filter components and it looks like we can create a filter to react to time of day, but I don't see how to cache the events till required.
There is no built-in caching mechanism. To accomplish what you described, you'll need to schedule a recurring run script operation that runs a script that takes care of the forwarding operations.
Ok, how do I do that?
I'm not 100% sure on what your wanting here, but "Store and Forward" for a given time of day should be able to be done with a single rule, as follows:
Rule "Time Range, Store and Forward"Filter+- Time of dayActions+- Log to file (store)+- Forward to another host (and forward)