I am working with India's largest bank for ISE Implementation. Bank has total 18 nodes installed across two locations. We have configured IBM QRADAR as external syslog server. Syslog team is receiving logs from all the PSNs however they are not seeing any logs from Monitoring and Admin node. Based on their observation, bank has raised following queries
1. Does Admin and MnT node sends log to external server? if yes, which types of logs are being sent by MnT and Admin node?
2. Is it possible to send logs only from monitoring node to external syslog server instead of all PSN sending logs to server?