[rsyslog-notify] Forum Thread: Re: Forwarding FROM Central rsyslog server - (Mode 'reply')

[noreply at adiscon.com]

User: Clifford 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24128#p24128

Message: 
----------
[quote="rgerhards":2y7rxb1z]

*.* @@remote-address

[/quote:2y7rxb1z]

Would that keep the logs on the OSSIM server AND forward them onto the
Splunk server? If so, that's exactly what I want. I was thinking that would
prevent the logs from being kept locally and just simply pass them off to
the remote system.