I need to send source types to my indexes as per normal. But I also got to send those same source types to a 3rd party in Syslog format.
I can't seem to get the transforms to send to TCP and to Syslog. Has anyone got any experience with doing this?
I can do both as TCP which works fine, but if I mix and match it has issues.