Syslog Documentation

[hatface13]

Do you (or anyone) have documentation anywhere publicly available (or willing to share) on syslog and the messages that are sent?  Trying to build parsers in my SIEM and this would help a lot if I knew all of the messages that I need to create parsers for.  Easy to generate login and remote session/password viewed logs but I'm sure there are others I will need to parse out and I don't see it in the Security Admin Guide.

 

Thanks!

[support]

Hello,

 

Below is the format we are sending syslog messages across, which should be inline with teh RFC for this.

 

strParams = System.[String].Format("<{0}>{1} {2} {3} {4}", priority, AuditDate.ToString(SystemSettings.SyslogDateFormat), IPAddress, " ", "Passwordstate: " & Description & " Client IP Address = " & IPAddress)

Regards

Click Studios

[hatface13]

Thanks so much for this!