Greetings all! Hoping for some guidance on this? We noticed "gaps" in our LogInsight data from our VCSA appliances and seems it has at-least something to do with which protocol we selected (TLS, TCP, UDP, RELP) in the VAMI setup. Curious on which one (and port) we should be using to send syslog data from VCSA/PSCs to loginsight? I understand, generically, the differences between TCP/TLS/UDP/RELP-- I'm just curious what folks are using when considering it's a fairly large environment (1000+ hosts)
Also, in digging in further, we see there's two different syslog options in vCenter itself. Can someone tell us the difference?
Just curious what the difference here is and if both should be checked/enabled/true?
Thanks in advance!