https://community.splunk.com/t5/Getting-Data-In/Splunk-windows-logs-to-Snare-central/m-p/580247#M102376 <P>Hi&nbsp;</P><P>&nbsp;</P><P>Am trying to collect the windows logs from DCs and send them to both Splunk indexer and Third party System (Snare Central). I managed to send the logs using syslog configuration. But some how the logs are getting broken. I want my log format to be in "<STRONG>snare over syslog</STRONG>". Please suggest.</P><P>UF =&gt; HF =&gt; Snare Central</P><P>&nbsp;</P> Fri, 07 Jan 2022 10:37:53 GMT rajeshmetso 2022-01-07T10:37:53Z https://community.splunk.com/t5/Getting-Data-In/Splunk-windows-logs-to-Snare-central/m-p/580247#M102376 <P>Hi&nbsp;</P><P>&nbsp;</P><P>Am trying to collect the windows logs from DCs and send them to both Splunk indexer and Third party System (Snare Central). I managed to send the logs using syslog configuration. But some how the logs are getting broken. I want my log format to be in "<STRONG>snare over syslog</STRONG>". Please suggest.</P><P>UF =&gt; HF =&gt; Snare Central</P><P>&nbsp;</P> Fri, 07 Jan 2022 10:37:53 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-windows-logs-to-Snare-central/m-p/580247#M102376 rajeshmetso 2022-01-07T10:37:53Z