identifying the correct sourcetype removed only one part of the header, still however it does not remove the priority and the other part of the header... I had already tried that. I thank you, do you have any other solutions? Thank you, Giulia  ... View more

hello  , this is the current example of the outputs.conf, but still the header is not gone: [tcpout-server://xxxx..xxx:9997][tcpout-server://yyy.yyy.yyy:9997] [tcpout-server://zz.zzz.zzz:9997] [tcpout:default-autolb-group] server = xx.xxx.xxx:9997,yyy.yyy.yyy:9997,zz.zzz.zzz:9997 disabled = false [syslog] #defaultGroup = syslogGroup2 [syslog:syslogGroup1] server = aa.aaa.aa.a.:514 type = udp syslogSourceType = fortigate [syslog:syslogGroup2] server = bb.bbb.bbb:517 type = udp syslogSourceType = fortigate can you give me an example of how i could fix it? Thank you very much Giulia   ... View more

Hi @claudio_manig , I am trying to do as you wrote on the outputs.conf but it still has header problems. Can you provide me a practical example please? Thank you so much for your kindness and helpfulness, Giulia ... View more