I’m having trouble determining when you would use the network() source vs the syslog() source?

 

We have logs coming in on TCP port 514 from network devices, would it be best to use the network() source for this? Can you setup both the network() and syslog() sources to listen on TCP port 514 or would that cause issues?