https://community.splunk.com/t5/Getting-Data-In/Sending-syslog-without-any-header/m-p/96166#M20026 <P>Hi All</P> <P>When a firwall logs go to the Splunk and the Splunk redirects to our log collector, additional timestamp and syslog headers to the packet. It makes the logs indecipherable once they reach our log collector. </P> <P>Any solution passing logs without any log format changes?</P> <P>Thanks,</P> Wed, 23 Jan 2013 06:28:17 GMT hswoo2000 2013-01-23T06:28:17Z https://community.splunk.com/t5/Getting-Data-In/Sending-syslog-without-any-header/m-p/96166#M20026 <P>Hi All</P> <P>When a firwall logs go to the Splunk and the Splunk redirects to our log collector, additional timestamp and syslog headers to the packet. It makes the logs indecipherable once they reach our log collector. </P> <P>Any solution passing logs without any log format changes?</P> <P>Thanks,</P> Wed, 23 Jan 2013 06:28:17 GMT https://community.splunk.com/t5/Getting-Data-In/Sending-syslog-without-any-header/m-p/96166#M20026 hswoo2000 2013-01-23T06:28:17Z https://community.splunk.com/t5/Getting-Data-In/Sending-syslog-without-any-header/m-p/96167#M20027 <P>You can use the setting in Splunk inputs.conf <CODE>no_appending_timestamp</CODE>. See the README file or docs for inputs.conf.</P> Wed, 23 Jan 2013 07:31:29 GMT https://community.splunk.com/t5/Getting-Data-In/Sending-syslog-without-any-header/m-p/96167#M20027 gkanapathy 2013-01-23T07:31:29Z