...

The Log Management Service is configured with JOC Cockpit's Settings page:

• Log_server_active (Default: false)
  • Specifies that the Log Management Service is started with JOC Cockpit.
• log_server_port (Default: 4245)
  • Specifies the UDP port to which the Log Management Service will listen.
• log_server_max_messages_per_second (Default: 1000)
  • Specifies the max. number of messages per second that the Log Management Service will process.

Delimitation

Due to limitations of the underlying Syslog Protocol the JS7 Log Management Service does not meet elaborated requirements for security, resiĺience and high availability.

...

• Flooding of messages is a possible scenario for attacks that is not covered by the Syslog Protocol.
• The JS7 Log Management Service will try to identify such scenarios and will shut downlimit processing of messages. The behavior is intended to keep the JOC Cockpit operational in case of DNS attacks.

...