What node(s) is/are sourcing Syslog messages?

[giosif]

Hi all,

Can someone please tell me what node(s) in a distributed ISE deployment is sourcing Syslog messages towards a remote logging target?

Is it just the MnT or every node (i.e. PAN, MnT, PSN)?

Also, does the same apply to alarms that are sent via Syslog (assuming that option is enabled for the alarms and for that remote logging target)?

Thanks!

[hslai · Accepted solution]

Every ISE node does.

As to alarms, only the active MnT node does.

[giosif]

Thank you for the quick answers!