I was evaluating ELA for a week and found a problem of collecting syslog.

I have a generic UTM firewall appliance named "NetworkBox" which is able to provide syslog to ELA.  With a few clicks, ELA is able to display all the syslog information from my firewall.  

But I found that the log size is huge, within 2 hours, the log file occupied more than 30GB of my hdd space.

While I was also evaluating another log consolidation product a few week ago, the daily log size of my firewall is less than 1GB only.

Did I missed any configurations like auto-index, or else, please advise.

Anthony