Hi @ahmadgul21, I don't think that ack is the problem, after the configuration check, I suppose that the problem is in infrastructure: storage or network. Ciao. Giuseppe ... View more

I've accepted this as the solution since distributing the load would definitely help resolve the issue but since I was looking for a workaround to avoid that - had kept this open and kind of forgot about this thread later on - but for anyone else having the same issue - we did end up dividing the load on two Syslog Servers and the issue has accordingly reduced - there is still some delay some times but that is probably due to still the load being too much for even two Syslog Servers sometimes during peak. ... View more

One comment about push vs pull. All traffic are initiated by client never by DS! The DS just listened and respond to clients initiated request. r. Ismo ... View more