Recently I was poking around in setup on Kiwi Syslog and noticed a couple of alerts that were not turned on. We have had Syslog for many years and I had left them off because it was a default setting. So now they are on and we are getting alerts about "# messages overflowed the message queue this hour."
I have several questions:
1. If messages are overflowing, are they lost? In other words, these are messages that will not show up in the logs?
2. I found information on how to increase the buffer size at this link: Kiwi Syslog Daemon. It refers to changing a registry key. But, I can't find the registry key to edit. Any ideas on how to get the reg keys in there or why I don't have them?
3. In the statistics in the alert, there are counts of Errors - Oversize message. Could this be causing the messages to overflow? Is there a quick and easy way to figure out which device is sending the oversize messages?
4. Is this why it is turned off by default? I'm half joking here about all of my questions.
Thanks,
castlemve