I have an infrastructure where we are using RHEL Linux machine as a syslog server and vRealize log insight is forwarding logs to it. But the issue is that when we have configured the destination to that RHEL Syslog server, the events dropped are more that the events forwarded.
we had troubleshooted from Syslog end and created the tcpdump- log.pap file in which we found that my cluster is sending logs to syslog but the acknowledgment duplicacy is occuring.
So what could be the actual cause of my issue?
