We are setting up a remote site and mulling over the options of syslog architecture. We can configure the devices to send syslog to additional poller and then additional poller can use MSMQ to forward to main site. Or alternatively we can configure the devices to send syslog directly to main site poller. Does transfer via MSMQ offer WAN bandwidth benefits? Does it perform compression to reduce the WAN traffic? Knowledgeable ones please advise!
↧