Thanks ,
please let me know about some points:
> All the agents that are installed on syslog server, will be licensed based?
> what will be the compression ratio(a rough idea)
>All the syslogs that are coming on syslog servers, LEM agent will normalize that logs and send it to LEM or after coming to LEM ,logs will be normalized?