Hello everyone,
I've configured one of our Sophos devices with some rules and policies .
The problem is with the amount of Logs it generates per second!
There are too many Information level logs about WAF and other types of log components. So it is swallowing a big portion of local and remote storage and are syslog is out of control. Meanwhile we have to purge local disk frequently.
I know I am able to change severity level for those messages which are passed to Syslog (Unfortunately any normal actions from Admin like changing rules are logged is "Information". So it is not a good idea to even change it).
Now, cloud you please help me to do something?
Note: If I was one of those who work in development team, I would change all admin actions log severity to "Notice" .
This thread was automatically locked due to age.
Quote