Syslog custom content - One action per syslog

Bojan 17
Viewed 0

Hello,

Is it possible to change the configuration of the syslog log structure? We would like to have every action reported separately.

Curently, we are receiving multiple actions (OP:) in a single syslog linea. Is it possible to break this to be like every action in a separate log ?

Thanks and best regards,

Bojan

structure log lines
1 Answers

It depends on the monitor that sends the alerts. If you are using the Event Log monitor, make sure you're using a recent version, and then check the "report each event separately". It will then send each matching event to the Syslog action independently.

If you're using some other monitor, let us know and we'll see what we can do.

Doug1126
Related