How I can check which syslog's file is source for RME (when RME generate reports) and Can I change this file to different?
Solaris LMS 2.6 RME 4.0.5
Look at the /etc/syslog.conf and look for the entry:
# Added for Cisco Syslog Analyzer (begin)
# Added for Cisco Syslog Analyzer (end)
You can make your changes here to the location and make sure to do a HUP on the syslogd process after changing.