Does NiFi listenSysLog processor require nifi on source server?

[#1]

Does NiFi listenSysLog processor requires nifi on source server? Or does it simply "listen" to the port identified in the processor and pull every x seconds? If what what is the frequency of that pull? Is the frequency of the pull customizable?

[#2 · Accepted solution]

It does not need to be on the source server, it is listening on the port in the processor for incoming connections. A syslog server can be configured to forward messages to the host & port that the processor is listening on.

Once it accepts connections it will be reading as fast as possible. The main properties to consider customizing are the Max Batch Size, Max Size of Socket Buffer Size, and Max Size of Message Queue Size, but this depends a lot on your environment and the amount of data.