Explaining the properties:
Active: false Format: $(RecNr): $(AuthUser): $(Msg) Type: TCP Hostname: s4mdev-doc01 Port: 1468 Throttle Threshold: 20 Throttle Ease Delay: 50
This can either be TCP or UDP, depending on what kind of connection Syslog is running.
The hostname or IP where syslog is running.
The port number on which Syslog is running.
Setting a Throttle Level can prevent message loss to syslog when a lot of messages are sent at once. This value is the number of messages sent before a small delay is added (1ms), so less is safer, but slower. An empty value or a value below 1 means no throttling. A missing or invalid setting defaults to 10.
Throttle Ease Delay
There is also an ease in value where the delay starts with Ease Delay and decrements until 1ms, because it appears that certain Syslog implementations choke even more at the start of a fast message streams. A missing or invalid setting defaults to 100.
A good tool to use for Syslog is Syslog Watcher .