I have a requirement to forward specific events to Nitro (McAffee
somthing) via syslog. I have created a syslog integrator, and configured
that, I have created and event action that uses the integrator, and
lastly i have a correlation that fires and sends the event off. The
event are supposed to be sent in "Delimited" format.

On the Nitro side of things the events comes in ok, but its far from
delimited. It appears on multiple rows and are by that not parsable

Any thoughts?


abergvall's Profile: https://forums.netiq.com/member.php?userid=278
View this thread: https://forums.netiq.com/showthread.php?t=49305