Customizing syslog-ng snmp() destination option
Hi All, I am using syslog-ng v3.30 and forwarding snmp traps from this server using snmp() destination option - [cid:image001.png@01D839F6.A0D8F220] I wanted to add a field "agent-addr" as part of the trap & not in the variable-binding. This field "agent-addr" will contain the IP address of the device which is sending the syslog message to the syslog server. How can I add a customized filed as part of the trap? Regards, Shivani Maurya
Can anyone please help me here? Regards, Shivani Maurya From: Maurya, Shivani Sent: Thursday, March 17, 2022 12:01 PM To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Customizing syslog-ng snmp() destination option Hi All, I am using syslog-ng v3.30 and forwarding snmp traps from this server using snmp() destination option - [cid:image001.png@01D83D6C.88617400] I wanted to add a field "agent-addr" as part of the trap & not in the variable-binding. This field "agent-addr" will contain the IP address of the device which is sending the syslog message to the syslog server. How can I add a customized filed as part of the trap? Regards, Shivani Maurya
Hi, On Mon, Mar 21, 2022 at 04:12:19PM +0000, Maurya, Shivani wrote:
I wanted to add a field "agent-addr" as part of the trap & not in the variable-binding. This field "agent-addr" will contain the IP address of the device which is sending the syslog message to the syslog server. How can I add a customized filed as part of the trap?
The documentation of the snmp destination is here https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edit... You can use syslog-ng macros inside the snmp-obj parameter.
Hi, I'm not an SNMP expert, but I looked around and I don't know if what you ask is possible with SNMP protocol. Can you show an example of what this trap would look like, please? What is the difference on the receiving side (e.g. with snmptrapd)? Regards, Gabor Fabien Wernli <wernli@in2p3.fr> ezt írta (időpont: 2022. márc. 21., H, 17:31):
Hi,
On Mon, Mar 21, 2022 at 04:12:19PM +0000, Maurya, Shivani wrote:
I wanted to add a field "agent-addr" as part of the trap & not in the variable-binding. This field "agent-addr" will contain the IP address of the device which is sending the syslog message to the syslog server. How can I add a customized filed as part of the trap?
The documentation of the snmp destination is here https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edit... You can use syslog-ng macros inside the snmp-obj parameter.
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Hi Gabor, I have captured the traffic which we are forwarding using snmp() – [cid:image001.png@01D83DE1.7C82C330] But this is how I want an extra field to be added in trap itself before the variable-binding - [cid:image002.png@01D83DE1.7C82C330] Regards, Shivani Maurya From: Nagy Gábor <gabor.hl@gmail.com> Sent: Tuesday, March 22, 2022 12:11 AM To: wernli@in2p3.fr; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu>; Maurya, Shivani <shivani.maurya@intel.com> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option Hi, I'm not an SNMP expert, but I looked around and I don't know if what you ask is possible with SNMP protocol. Can you show an example of what this trap would look like, please? What is the difference on the receiving side (e.g. with snmptrapd)? Regards, Gabor Fabien Wernli <wernli@in2p3.fr<mailto:wernli@in2p3.fr>> ezt írta (időpont: 2022. márc. 21., H, 17:31): Hi, On Mon, Mar 21, 2022 at 04:12:19PM +0000, Maurya, Shivani wrote:
I wanted to add a field "agent-addr" as part of the trap & not in the variable-binding. This field "agent-addr" will contain the IP address of the device which is sending the syslog message to the syslog server. How can I add a customized filed as part of the trap?
The documentation of the snmp destination is here https://www.syslog-ng.com/technical-documents/doc/syslog-ng-open-source-edit... You can use syslog-ng macros inside the snmp-obj parameter. ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
Hi again, On Tue, Mar 22, 2022 at 06:09:32AM +0000, Maurya, Shivani wrote:
But this is how I want an extra field to be added in trap itself before the variable-binding -
[cid:image002.png@01D83DE1.7C82C330]
As I said, I think you can achieve this using `snmp-obj()`. Try the following: snmp-obj('.1.3.6.1.6.3.18.1.3.0', 'Ipaddress', "${SOURCEIP}")
Thanks Shivani for the example! I didn't know "agent-addr" is a standardized SNMPv1 trap element. I've found it in the SNMPv1 RFC too. [1] Unfortunately, syslog-ng only supports snmpv2c and snmpv3 versions. I've checked the code of snmp-dest() and I think it would be _relatively_ easy to add snmpv1 support. I can open a feature request on GitHub, as I'm not sure when we could get to this in the near future, or is there any reason against SNMPv1. Regards, Gabor [1] https://datatracker.ietf.org/doc/html/rfc1157/#section-4.1.6 ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu> on behalf of Fabien Wernli <wernli@in2p3.fr> Sent: Tuesday, March 22, 2022 8:12 To: Maurya, Shivani <shivani.maurya@intel.com> Cc: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi again, On Tue, Mar 22, 2022 at 06:09:32AM +0000, Maurya, Shivani wrote:
But this is how I want an extra field to be added in trap itself before the variable-binding -
[cid:image002.png@01D83DE1.7C82C330]
As I said, I think you can achieve this using `snmp-obj()`. Try the following: snmp-obj('.1.3.6.1.6.3.18.1.3.0', 'Ipaddress', "${SOURCEIP}") ______________________________________________________________________________ Member info: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=mJAT2oTdxOtlg%2FviRHWvJfDuGCGeAPABN%2BCqDmuFA9Q%3D&reserved=0 Documentation: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Nojx51D6YkOswnnLzog1ykOV3D39L8cv%2B4NLIRm%2BkNU%3D&reserved=0 FAQ: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=u3FuE5V2S8%2BCWe2k6AupGSQ%2F6gX3j4SMvMDTchwJuOM%3D&reserved=0
Hi Gabor, We want to use snmpv2v/snmpv3 only going forward. This is the reason I want to add the field "agent-addr". Is there a way to add "agent-addr" field with snmpv2c/snmpv3 ? Regards, Shivani Maurya From: Gabor Nagy (gnagy) <Gabor.Nagy@oneidentity.com> Sent: Tuesday, March 22, 2022 8:48 PM To: Maurya, Shivani <shivani.maurya@intel.com>; wernli@in2p3.fr; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option Thanks Shivani for the example! I didn't know "agent-addr" is a standardized SNMPv1 trap element. I've found it in the SNMPv1 RFC too. [1] Unfortunately, syslog-ng only supports snmpv2c and snmpv3 versions. I've checked the code of snmp-dest() and I think it would be _relatively_ easy to add snmpv1 support. I can open a feature request on GitHub, as I'm not sure when we could get to this in the near future, or is there any reason against SNMPv1. Regards, Gabor [1] https://datatracker.ietf.org/doc/html/rfc1157/#section-4.1.6 ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>> on behalf of Fabien Wernli <wernli@in2p3.fr<mailto:wernli@in2p3.fr>> Sent: Tuesday, March 22, 2022 8:12 To: Maurya, Shivani <shivani.maurya@intel.com<mailto:shivani.maurya@intel.com>> Cc: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi again, On Tue, Mar 22, 2022 at 06:09:32AM +0000, Maurya, Shivani wrote:
But this is how I want an extra field to be added in trap itself before the variable-binding -
[cid:image002.png@01D83DE1.7C82C330]
As I said, I think you can achieve this using `snmp-obj()`. Try the following: snmp-obj('.1.3.6.1.6.3.18.1.3.0', 'Ipaddress', "${SOURCEIP}") ______________________________________________________________________________ Member info: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=mJAT2oTdxOtlg%2FviRHWvJfDuGCGeAPABN%2BCqDmuFA9Q%3D&reserved=0 Documentation: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Nojx51D6YkOswnnLzog1ykOV3D39L8cv%2B4NLIRm%2BkNU%3D&reserved=0 FAQ: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=u3FuE5V2S8%2BCWe2k6AupGSQ%2F6gX3j4SMvMDTchwJuOM%3D&reserved=0
Hi Gabor, Can you please help here? Regards, Shivani Maurya From: Maurya, Shivani Sent: Tuesday, March 22, 2022 10:27 PM To: Gabor Nagy (gnagy) <Gabor.Nagy@oneidentity.com>; wernli@in2p3.fr; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: RE: [syslog-ng] Customizing syslog-ng snmp() destination option Hi Gabor, We want to use snmpv2v/snmpv3 only going forward. This is the reason I want to add the field "agent-addr". Is there a way to add "agent-addr" field with snmpv2c/snmpv3 ? Regards, Shivani Maurya From: Gabor Nagy (gnagy) <Gabor.Nagy@oneidentity.com<mailto:Gabor.Nagy@oneidentity.com>> Sent: Tuesday, March 22, 2022 8:48 PM To: Maurya, Shivani <shivani.maurya@intel.com<mailto:shivani.maurya@intel.com>>; wernli@in2p3.fr<mailto:wernli@in2p3.fr>; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option Thanks Shivani for the example! I didn't know "agent-addr" is a standardized SNMPv1 trap element. I've found it in the SNMPv1 RFC too. [1] Unfortunately, syslog-ng only supports snmpv2c and snmpv3 versions. I've checked the code of snmp-dest() and I think it would be _relatively_ easy to add snmpv1 support. I can open a feature request on GitHub, as I'm not sure when we could get to this in the near future, or is there any reason against SNMPv1. Regards, Gabor [1] https://datatracker.ietf.org/doc/html/rfc1157/#section-4.1.6 ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>> on behalf of Fabien Wernli <wernli@in2p3.fr<mailto:wernli@in2p3.fr>> Sent: Tuesday, March 22, 2022 8:12 To: Maurya, Shivani <shivani.maurya@intel.com<mailto:shivani.maurya@intel.com>> Cc: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi again, On Tue, Mar 22, 2022 at 06:09:32AM +0000, Maurya, Shivani wrote:
But this is how I want an extra field to be added in trap itself before the variable-binding -
[cid:image002.png@01D83DE1.7C82C330]
As I said, I think you can achieve this using `snmp-obj()`. Try the following: snmp-obj('.1.3.6.1.6.3.18.1.3.0', 'Ipaddress', "${SOURCEIP}") ______________________________________________________________________________ Member info: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=mJAT2oTdxOtlg%2FviRHWvJfDuGCGeAPABN%2BCqDmuFA9Q%3D&reserved=0 Documentation: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Nojx51D6YkOswnnLzog1ykOV3D39L8cv%2B4NLIRm%2BkNU%3D&reserved=0 FAQ: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=u3FuE5V2S8%2BCWe2k6AupGSQ%2F6gX3j4SMvMDTchwJuOM%3D&reserved=0
I don't think adding a custom field to an SNMPv2 trap is possible, but I could be wrong as I'm not an expert in SNMP. I didn't find anything either in the net-snmp library or in the RFCs of SNMPv2. Your option as far as I see is to send the agent-addr in the varbindlist, as SNMPv1 is not sufficient and it is not supported either in syslog-ng. Nevertheless, I don't know your use case, maybe we can find out a different workaround. Regards, Gabor ________________________________ From: Maurya, Shivani <shivani.maurya@intel.com> Sent: Wednesday, March 23, 2022 7:38 To: Gabor Nagy (gnagy) <Gabor.Nagy@oneidentity.com> Cc: wernli@in2p3.fr <wernli@in2p3.fr>; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: RE: [syslog-ng] Customizing syslog-ng snmp() destination option CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi Gabor, Can you please help here? Regards, Shivani Maurya From: Maurya, Shivani Sent: Tuesday, March 22, 2022 10:27 PM To: Gabor Nagy (gnagy) <Gabor.Nagy@oneidentity.com>; wernli@in2p3.fr; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: RE: [syslog-ng] Customizing syslog-ng snmp() destination option Hi Gabor, We want to use snmpv2v/snmpv3 only going forward. This is the reason I want to add the field “agent-addr”. Is there a way to add “agent-addr” field with snmpv2c/snmpv3 ? Regards, Shivani Maurya From: Gabor Nagy (gnagy) <Gabor.Nagy@oneidentity.com<mailto:Gabor.Nagy@oneidentity.com>> Sent: Tuesday, March 22, 2022 8:48 PM To: Maurya, Shivani <shivani.maurya@intel.com<mailto:shivani.maurya@intel.com>>; wernli@in2p3.fr<mailto:wernli@in2p3.fr>; Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option Thanks Shivani for the example! I didn't know "agent-addr" is a standardized SNMPv1 trap element. I've found it in the SNMPv1 RFC too. [1] Unfortunately, syslog-ng only supports snmpv2c and snmpv3 versions. I've checked the code of snmp-dest() and I think it would be _relatively_ easy to add snmpv1 support. I can open a feature request on GitHub, as I'm not sure when we could get to this in the near future, or is there any reason against SNMPv1. Regards, Gabor [1] https://datatracker.ietf.org/doc/html/rfc1157/#section-4.1.6<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Frfc1157%2F%23section-4.1.6&data=04%7C01%7CGabor.Nagy%40oneidentity.com%7C574fb68ee07141f2da1308da0c97ba6d%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637836143070345948%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=sxX1x%2BMG02oLeVAtBBPjpcMYkXbAzHRvWEvfoh9KQ%2FI%3D&reserved=0> ________________________________ From: syslog-ng <syslog-ng-bounces@lists.balabit.hu<mailto:syslog-ng-bounces@lists.balabit.hu>> on behalf of Fabien Wernli <wernli@in2p3.fr<mailto:wernli@in2p3.fr>> Sent: Tuesday, March 22, 2022 8:12 To: Maurya, Shivani <shivani.maurya@intel.com<mailto:shivani.maurya@intel.com>> Cc: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu<mailto:syslog-ng@lists.balabit.hu>> Subject: Re: [syslog-ng] Customizing syslog-ng snmp() destination option CAUTION: This email originated from outside of the organization. Do not follow guidance, click links, or open attachments unless you recognize the sender and know the content is safe. Hi again, On Tue, Mar 22, 2022 at 06:09:32AM +0000, Maurya, Shivani wrote:
But this is how I want an extra field to be added in trap itself before the variable-binding -
[cid:image002.png@01D83DE1.7C82C330]
As I said, I think you can achieve this using `snmp-obj()`. Try the following: snmp-obj('.1.3.6.1.6.3.18.1.3.0', 'Ipaddress', "${SOURCEIP}") ______________________________________________________________________________ Member info: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=mJAT2oTdxOtlg%2FviRHWvJfDuGCGeAPABN%2BCqDmuFA9Q%3D&reserved=0<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.balabit.hu%2Fmailman%2Flistinfo%2Fsyslog-ng&data=04%7C01%7CGabor.Nagy%40oneidentity.com%7C574fb68ee07141f2da1308da0c97ba6d%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637836143070345948%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=5A6zt%2FyDfaKksjYe%2FAXv2PR8zrYwJZETZ91gPvPduLw%3D&reserved=0> Documentation: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=Nojx51D6YkOswnnLzog1ykOV3D39L8cv%2B4NLIRm%2BkNU%3D&reserved=0<https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fsupport%2Fdocumentation%2F%3Fproduct%3Dsyslog-ng&data=04%7C01%7CGabor.Nagy%40oneidentity.com%7C574fb68ee07141f2da1308da0c97ba6d%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637836143070502180%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=LEKiL8bNZSlGnO5n2wpW6EhCNPxhs3GOigyif8Pe%2Be8%3D&reserved=0> FAQ: https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7Cgabor.nagy%40oneidentity.com%7C1341f1fe92104de79ae708da0bd35bee%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637835299655341547%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=u3FuE5V2S8%2BCWe2k6AupGSQ%2F6gX3j4SMvMDTchwJuOM%3D&reserved=0<https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.balabit.com%2Fwiki%2Fsyslog-ng-faq&data=04%7C01%7CGabor.Nagy%40oneidentity.com%7C574fb68ee07141f2da1308da0c97ba6d%7C91c369b51c9e439c989c1867ec606603%7C0%7C1%7C637836143070502180%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=F6NcWFgmoWvUaLYcRMfmw%2Bkd3PEbWJhdkjNeF%2FQrV9I%3D&reserved=0>
participants (4)
-
Fabien Wernli
-
Gabor Nagy (gnagy)
-
Maurya, Shivani
-
Nagy Gábor