Changing the Default Syslog Collection Folder on a Windows Deployment:
By default, syslogs are collected in <GMSVP>syslogs folder. The Syslog Collector service writes the syslogs in real time in this folder – the faster the disk, the better the performance of writing syslogs to this folder. These syslogs are then read by the Summarizer service to be parsed, enhanced and then uploaded to the reporting database.
To change the default syslogs collection folder:
Confirm that syslogs are now being collected in the new folder.
Troubleshooting:
If no syslogs appear to be going to the new folder reboot the GMS server.