22.2.1 Limitations of Syslog

  • On Identity Server and ESP, events are cached to a local file during a local audit failure. The file location is as follows:


  • The log forwarding of cached logs is not supported for Identity Server and ESP events.

  • The failover mechanism communication does not work in Access Gateway.

IMPORTANT:By default, syslog agents are configured without SSL communication with the remote audit server. You can manually configure SSL communication between a local syslog agent and the remote syslog audit server. For more information, see Enabling SSL Communication.