Syslog probe parameters

[tednorlander]

Hi,

the sample data given in the docs.servicenow.com states tha following parameters:

Syslog-server, assumed to be in fqdn format.

Mid-server to use: I don't understand this parameter format?

- Is it supposed to be mid.server.<your-midserver-name> or is it supposed to be the hostname specified for the mid server?

Please help asap as I'm setting this up at a customer location right now.

Best regards

Ted

PS! Docs entry listed below for reference only.

var sl = new Syslog('syslog.service-now.com ',
'mid.server.Eclipse', 16);
sl.log('This is a sample log message', 6);

[Ruggero_]

Hi dsharpnote,

Did you find a way to change the format of the syslog to the LEEF one, i'm trying to do the same thing as you, but i'm not finding a method to change the format. I can change the format between IETF-syslog format (RFC 5424) and BSD-syslog format (RFC 3164) by putting false or true the "this.bsd-style2" parameter on the syslog script include but don't find the leef format one.