Allow changes to syslog format for easier reporting in 3rd party logging tools
The "syslog" format is not very sysloggy.for example some fields are quoted, some are not, blank values are included but not quoted making it unnecessarily difficult to parse. permitted. Be nice to be able to specify custom formats to avoid messing about with, for example, logstash filters.
The original Cyberoam Syslog format is very poor and only compliance with iView. All 3rd Party Tools have a Problem with this Content.
Please Change this to a normal syslog Content with Standard like.
Wan Hafizi commented
Having the same problem.
Some data not parsed properly because of syslog format error/inconsistencies. Some data are erronous or non existance.
For example most of the time i see this in the log;
Not only the "trans_src_ip" value is not there, the "trans_src_port" value is invalid