Hi,

Thanks for your question.

I do not see any information on the syslog forward queue size or a way to monitor it. Looks like the retention is by the number of messages in the queue so it depends on how fast the log is filled. Rsyslog default is 1000 messages, so maybe that amount.

Let us know if you have any additional questions.