Skip to content

Syslog

Syslog (TCP)

Output events and detections to a syslog target.

  • dest_host: the IP or DNS and port to connect to, format www.myorg.com:514.
  • is_tls: if true will output over TCP/TLS.
  • is_strict_tls: if true will enforce validation of TLS certs.
  • is_no_header: if true will not emit a Syslog header before every message. This effectively turns it into a TCP output.
  • structured_data: arbitrary field to include in syslog "Structured Data" headers. Sometimes useful for cloud SIEMs integration.

Example:

dest_host: storage.corp.com
is_tls: "true"
is_strict_tls: "true"
is_no_header: "false"

What's Next