I'd love to be able to set up LEM to forward specific events to another syslog server.
my use case is forwarding change events to Orion for RTCD.
Great, I would also like to see this feature to be able to forward RAW logs to other 3rd party providers, such as Dell SecureWorks for example, who have their own hardware-based collector devices
My use case and expected benefits described here:
Is It Possible To Forward RAW Logs & Events That LEM Collects To Other 3rd Party Devices?
Devices should have a single logging destination and then that destination can forward the log to whomever needs it including short term destinations.
Hi FamilyOfCrowes,
Do you know of any decent solutions for this? I understand that needs to sit in between LEM and everything else
I want to use LEM, but I also want to make sure we will not be stuck with it after configuring all our end nodes to report to it. We might outsource it in the future somewhere else.
LEM 6.5 introduced the ability to forward raw log data (both syslog and agent-based logs) from LEM to other applications. You can view the steps involved here: Enable log forwarding - SolarWinds Worldwide, LLC. Help and Support
