Created: 30 Aug 2007 • Updated: 21 May 2010 | 1 comment
We are collecting logs from multiple servers using syslog-ng. Can SSIM process these logs directly, or is some type of agent required to process the syslog records?
Also, is it possible to send events directly to SSIM? If so can you point me to documentation on message format and communications interface?
Thanks in advance.