You can only choose syslog for text-based logs. The Syslog Push method sends log messages to a remote syslog server on port 514. This method conforms to RFC 3164. Maximum message size is configurable on the WSA You can increase the maximum message size on a log subscription in the WSA. It defaults to 1024.  When you choose this method, you must enter the following information: Syslog server hostname Protocol to use for transmission, either UDP or TCP Maximum message size Valid values for UDP are 1024 to 9216. Valid values for TCP are 1024 to 65535. Maximum message size depends on the syslog server configuration. Facility to use with the log ... View more