Syslog Reliability

• “traditional” syslog works OK over a non-congested LAN

• Expect some packet loss when the network is congested, the sender or receiver is busy, the network is slow (WAN) or there is a large burst of syslog traffic

• Plan for some minor packet loss in your analyzer

• Experience shows it is reliable enough to work

• Newer developments promise better reliability