You would like to know the technical details on the Bulk Log transfer feature in Symantec Data Center Security (DCS) common detection parameters.
The bulk logged events are saved as a .zip file on the agent
The zip file(s) are transferred from the agent to the manager over port 443 (HTTPS) when the size limit of the log files has been reached.
The file size, and bulk logging configuration can be configured in the default common parameters in the java console, and applied via Security Group in the UMC server console. See java console screenshot below:
For more information on bulk log settings see the online help document: