I have a task to configure syslog server and send only the audit logs to it instead of everything. currently i have 2 syslog servers which are configured to get all logs, but the new server has to receive only the audit logs. How do i do this?
Thanks,
Sridhar