1 Reply Latest reply on Sep 12, 2013 2:31 PM by rob.hock

    NPM Syslog Viewer configuration or formatting

    jason.hurst

      Does anyone know if there is a way to configure how syslogs are received in NPM?

       

      I am doing log forwarding from my SIEM, but it will not take the syslog from the SIEM.

       

      The SIEM is sending <PRIORITY> TIMESTAMP HOSTNAME MESSAGE, but NPM just puts the HOSTNAME as part of the message, it does not accept it as the HOSTNAME or IP address as fields.

       

      How can I correct that?

       

      RFC-3164 states that this is how messages should be forwarded.

       

      Thanks for any insight.

       

      Jason