https://community.splunk.com/t5/Getting-Data-In/Proofpoint-Syslog-Logging-Levels/m-p/437780#M76343 <P>Hello All, </P> <P>I'm working with Proofpoint logs via Syslog and have have been running the Proofpoint logs on TRACE level for quite some time now. This is ingesting a lot of data into splunk which I think is not required. I switched on the TRACE logging for the Proofpoint TAP, which is no longer required ( as I can use the API). </P> <P>I'm wondering if there is any benefit in being in this TRACE level, of if I should switch it back to INFO.</P> <P>Thank you!</P> <P>JG</P> Tue, 12 Mar 2019 09:30:20 GMT JohnGilmour 2019-03-12T09:30:20Z https://community.splunk.com/t5/Getting-Data-In/Proofpoint-Syslog-Logging-Levels/m-p/437780#M76343 <P>Hello All, </P> <P>I'm working with Proofpoint logs via Syslog and have have been running the Proofpoint logs on TRACE level for quite some time now. This is ingesting a lot of data into splunk which I think is not required. I switched on the TRACE logging for the Proofpoint TAP, which is no longer required ( as I can use the API). </P> <P>I'm wondering if there is any benefit in being in this TRACE level, of if I should switch it back to INFO.</P> <P>Thank you!</P> <P>JG</P> Tue, 12 Mar 2019 09:30:20 GMT https://community.splunk.com/t5/Getting-Data-In/Proofpoint-Syslog-Logging-Levels/m-p/437780#M76343 JohnGilmour 2019-03-12T09:30:20Z