I'm using a Graylog server to centralize logs from network equipment and servers and I'm wondering if the Syslog service on the switches, windows machines, and other equipment, that service still going to save logs locally or just send them remotely and stops the local logging process?
Remote Logging vs Local Logging – Does Remote Logging Stop Local Logging?
grayloglog-filesrsyslogsyslog
Best Answer
Not unless configured to do so. You should be able to configure rsyslog to write both locally and remotely.