I have add this to source in a network part but still nothing. Also to note im using TLS.

source s_sys {
        system();
        internal();
        network(ip(0.0.0.0) port(6514)
        flags(syslog-protocol)
        transport("tls")
        tls(key_file("/etc/syslog-ng/cert.d/serverkey.pem")
        cert_file("/etc/syslog-ng/cert.d/servercert.pem")
        ca_dir("/etc/syslog-ng/ca.d")
        ) );

};

Or this should be placed in the client site ?

Ivan

On 05/17/2016 10:31 AM, Fabien Wernli wrote:
Hi,

On Tue, May 17, 2016 at 10:11:27AM +0200, Ivan Adji - Krstev wrote:

some RFC model 5424. Is there an option to configure the syslog-ng to
send this messages in that RFC format ?

Add `flags(syslog-protocol)` to the network destination

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq