syslog behavior when forwarding logs more than one syslog server (failover or replica ?)

[RPendela]

Hello Community Champs,

I configured two syslog server profiles and forwarding the logs to both servers, here my question is I am recieving traffic logs on both syslog servers but system logs are not recieving on second syslog server (thinking, for system logs it acting as failover?) even my system logs showing me connection established to second syslog server.

Also, is there any way I can configure syslog failover on PA-vm 100, 300, 820? 

[MP18 · Accepted solution]

@RPendela 

By default PA can send syslogs to upto 4 devices at same time.

You can do the PCAP on the Management plane to Tshoot further if your MGMT port is forwarding the syslogs.

Regards

Mahesh