What do I lose if I don't send Syslog messages to Solarwinds? I'm already getting snmp traffic (traps) from these devices and I'm logging to a Kiwi server

I've been streamlining the amount of traffic my Solarwinds server gets and I noticed that much of the Syslog traffic does not get attention unless you create filters for matching to an alert. If I stop sending syslog messages to Solarwinds, what do I lose? I do get traps from the same devices.

Thanks,

--Lunar53

Parents
  • decide first if you want to make use of the syslog messages in Orion.

    If you're going to use them, use Kiwi to just send the messages that you need.

    We use Kiwi as the syslog forwarder so we only have one destination for syslogs then can fan out/direct messages where they need to go. This was mainly because needed to be able to send the same messages to different destination log managers. Now Kiwi doesn't need to worry about history etc, it lets the destination log manager worry about that.

Reply
  • decide first if you want to make use of the syslog messages in Orion.

    If you're going to use them, use Kiwi to just send the messages that you need.

    We use Kiwi as the syslog forwarder so we only have one destination for syslogs then can fan out/direct messages where they need to go. This was mainly because needed to be able to send the same messages to different destination log managers. Now Kiwi doesn't need to worry about history etc, it lets the destination log manager worry about that.

Children
No Data