Hi Evan, On Wed, Sep 02, 2015 at 06:38:53AM -0700, Evan Rempel wrote: > I'm not sure about syslog protocol (new RFC) if the TAGS is prepended > with the .SDATA if the syslog parser will populate the TAGS. I would > hope so. I'm afraid it won't