danh2010 wrote:
It doesn't....I just swapped one of my View servers and it alerted me that I don't have an event db in place.
That's ridiculous. If I am logging by syslog, why should it care if I don't have an events db in place?
ahhh ...
well then it must be as it has been: events logging is very detailed, and correlates user and desktop activity, and etc ...
I think syslog is more general "system level" logging that does not capture user and/or desktop level activity ....
*I think*