Been having an issue sending logs to our Syslog server
I've designated one of our SEPMs to be the Master Logging server. It works fine for a few days, then suddenly stops sending the log files. If I restart the SEPM service on that SEPM it will then start sending logs for a few days and then stop again. I can continue to restart the service but it's more of a workaround than a fix.
Just curious to see if anyone has had experience with this.
Nothing has changed on the syslog server or the SEPM for that matter. We put a sniffer on the syslog server and could see traffic from SEPM, then it would stop.
Not really what changed as of yet.