Tell me more, please. I'm quite sure that there is Splunk in my future as well, 
can you share your syslog config?

-- 

Remco Post
remco AT plcs DOT nl
06-248 21 622

> Op 23 aug. 2017 om 19:12 heeft Shawn Drew <shawndo AT GMAIL DOT COM> het 
> volgende geschreven:
> 
> Yes, they ninja-added this is 7.1.4
> I enabled it and now I can collect all TSM actlogs and use syslog to forward 
> to splunk without a splunk agent and without the weird formatting of the 
> filetextexit. I wish they had this on all the architectures.
> You can use the syslog utilities to do filtering if you want also.
> 
>> On Aug 23, 2017, 11:08 AM -0400, Remco Post <r.post AT plcs DOT nl>, wrote:
>> Hi all,
>> 
>> I read something nice in the TSM server manual: TSM now supports logging to 
>> syslog on Linux (and, it no longer supports SNMP). Now, my customer has a 
>> very specific policy: certain events must be logged to an off-host logging 
>> facility. The current solution is to write those events to a filetextexit 
>> and copy these events once a minute to a remote host. Brrr. So, I was 
>> wondering: has anyone done anything with TSM and syslog and forwarded the 
>> syslog events to another host for further processing?
>> 
>> --
>> 
>> Met vriendelijke groeten/Kind Regards,
>> 
>> Remco Post
>> r.post AT plcs DOT nl
>> +31 6 248 21 622


-- 

 Met vriendelijke groeten/Kind Regards,

Remco Post
r.post AT plcs DOT nl
+31 6 248 21 622