Syslog data format

Security Event Manager accepts syslog data from devices such as Syslog-ng and Rsyslog log forwarding utilities.

Data logged by Rsyslog-enabled devices to Security Event Manager must be in one of the formats listed below.

Format option 1

YYYY-MM-DD HH:MM:SS ip/address message

2024-4-25 06:22:36 10.0.0.1 This is my message

Format option 2

unix timestamp in milliseconds ip/address This is my message

1694686500000 10.0.0.1 This is my message

Supported format for Kiwi

DateTime (YYYY-MM-DD HH:MM:SS))[TAB] Priority (Facility.Level) [TAB] Hostname [TAB] Message

2024.04.25 10:15:00 Local7.info 10.0.0.1 This is my message