Log forwarding is something we haven't currently enabled in SEM. We have an ask as to whether we can forward syslog events over TLS to another system. The forwarding part is pretty straightforward, but can SEM forward them securely? The documentation I saw doesn't allude to that, unless I'm missing something.