https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149122#M2419 <P>Splunk app cef does this in a easy way (it replace Splunk realtime output app)</P> Thu, 23 Apr 2015 08:49:23 GMT matthieu_araman 2015-04-23T08:49:23Z https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149120#M2417 <P>Hi Team,<BR /> I would like to forward the syslog message output as CEF format and also would like to add additional custom key-value pairs and forward this message to the Thirdparty tool.</P> <P>Can anyone let me know if my above need can be fulfilled by the "Splunk Real-Time Output" tool?</P> <P>Thanks in advance.</P> Thu, 13 Feb 2014 11:18:18 GMT https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149120#M2417 nithin_shubhana 2014-02-13T11:18:18Z https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149121#M2418 <P>Please refrain from posting the same question several times.</P> Thu, 13 Feb 2014 15:29:12 GMT https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149121#M2418 kristian_kolb 2014-02-13T15:29:12Z https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149122#M2419 <P>Splunk app cef does this in a easy way (it replace Splunk realtime output app)</P> Thu, 23 Apr 2015 08:49:23 GMT https://community.splunk.com/t5/Alerting/Adding-custom-key-value-pairs-as-part-of-the-message-in-CEF/m-p/149122#M2419 matthieu_araman 2015-04-23T08:49:23Z