https://community.splunk.com/t5/Getting-Data-In/Can-I-use-syslogNG/m-p/362315#M93320 <P>I believe syslog-ng will do what you want, We use it extensively just not with filters. Will take some experimentation to get it working the way you want.</P> <P><A href="https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-filters.html">https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-filters.html</A></P> Thu, 08 Feb 2018 19:46:09 GMT plarsen 2018-02-08T19:46:09Z https://community.splunk.com/t5/Getting-Data-In/Can-I-use-syslogNG/m-p/362314#M93319 <P>We currently use rsyslog on our Linux forwarder with a file monitor input with filtering, but we would like to use syslogNG as we believe we can filter as the syslog streams in to the forwarder, reducing the size of the file and what gets indexed.</P> <P>can anyone provide some assistance?</P> <P>Thank You!</P> Thu, 08 Feb 2018 19:34:24 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-use-syslogNG/m-p/362314#M93319 pfabrizi 2018-02-08T19:34:24Z https://community.splunk.com/t5/Getting-Data-In/Can-I-use-syslogNG/m-p/362315#M93320 <P>I believe syslog-ng will do what you want, We use it extensively just not with filters. Will take some experimentation to get it working the way you want.</P> <P><A href="https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-filters.html">https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-filters.html</A></P> Thu, 08 Feb 2018 19:46:09 GMT https://community.splunk.com/t5/Getting-Data-In/Can-I-use-syslogNG/m-p/362315#M93320 plarsen 2018-02-08T19:46:09Z