On my Event Source Server, I can see that the server listening for
syslog messages on port 40006 (custom port) and the maximum messages the
server can buffer is 100,000. But there is a lot of messages dropped...
Do you have any idea why ?

I use Sentinel 7 and there is 100 windows servers sending there logs to
this Event Source Server in SYSLOG UDP.

Thank you

bgirault's Profile: https://forums.netiq.com/member.php?userid=2170
View this thread: https://forums.netiq.com/showthread.php?t=46510