getting increase var/log even having external syslog server

[tavi0906]

hi team,

having standalone with r81.10 the issue is the var/log is increasing continuously even after configured an external syslog server.

the logs are receving on the external server.

[Chris_Atkinson]

Syslog itself typically doesn't replace normal security logging rather happens in parallel. Have you changed the log retention settings or explored what's using the space otherwise?