RME won't be the exact time you receive the messages. The syslog.log or syslog_info would be as close as you can get to real time when viewing the syslogs that are reaching the server. The only real time method would be to run a packet capture and see when they hit the server.
As Dave said, syslog_info on Solaris will get you messages as close to real-time as possible without a sniffer. On Windows, though, our syslog receiver buffers messages as to allow for more scalability. Some of the features of the buffer can be tuned to allow messages to show up more quickly in the syslog.log.
However, depending on the rate of incoming syslog messages, you may still see gaps of minutes between when the syslog message arrived on the server, and when it is written to syslog.log. Fortunately, that is being addressed as part of an upcoming fix for CSCse90599.
We are pleased to announce availability of Beta software for 16.6.3. 16.6.3 will be the second rebuild on the 16.6 release train targeted towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are looking for early feedback from custome...