Rahul Jha

Please open a support case for WSA TA team and they should be able to help.

When disk buffering is enabled , it will extra load on SC4S(syslog-ng) to check the destination and created qf files , when they are disabled if the destination is not...

As @bazsi Mentioned it is already part of SC4S now.

Review in progress if we need this feature in SC4S

A sample how that can be implemented with modern method ``` block parser app-dest-new-cef() { channel { parser { add-contextual-data( selector(filters("`syslog-ng-sysconfdir`/conf.d/local/context/vendor_product_by_source.conf")), database("`syslog-ng-sysconfdir`/conf.d/local/context/vendor_product_by_source.csv") ignore-case(yes) prefix(".netsource.") ); }; }; }; application app-dest-new-cef[sc4s-postfilter]...