Hello,
I need to send sourcetypes to my index's as per normal. But I also got to send those same sourcetypes to a 3rd party in Syslog format.
I can't seem to get the transforms to send to TCP and to Syslog. As anyone got any experience with doing this?
I can do both as TCP works fine but if I mix and match it has issues
↧