I'm trying to forward level 6 (informational) syslogs to another server. I have the rule setup if severity is equal to 6 then forward to IP/UDP/514. I've also set it up to send a "log rule fired" event.
There are definitely level 6 syslogs coming in, but they aren't seeing the logs on the other server and no events are visible which tells me it isn't firing.
Any suggestions as to what I am missing?