How can I keep Syslog from reading and storing data?

Rah — Tue, 27 Sep 2022 20:54:49 GMT

In syslog ng I didn’t want to read the data and store the data , how do you do that?

Re: How can I keep Syslog from reading and storing data?

chaker — Wed, 28 Sep 2022 00:45:58 GMT

Here is an example of syslog-ng configuration that stores the data on disk for Splunk to read. You will need to manage the data's retention with something like logrotate.
https://www.splunk.com/en_us/blog/tips-and-tricks/using-syslog-ng-with-splunk.html

You could also use the Splunk App for Syslog (SC4S)