Skip to content

Commit 7393561

Browse files
Update SIEM-integration.md
1 parent 11a0f8c commit 7393561

File tree

1 file changed

+9
-5
lines changed

1 file changed

+9
-5
lines changed

wiki/SIEM-integration.md

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,11 +28,15 @@ syslog logger possible fields and values:
2828

2929
|Option|Description|
3030
|-------|-------|
31-
|Name|Name that identifies the logger: syslog, remote or remote_syslog|
32-
|Server|Server address. Leave it empty to log events to the local daemon|
33-
|Protocol|Only applicable if Server is not empty|
34-
|Format|possible values: rfc3164, rfc5424, csv or json. RFC5424 will log events witht the format KEY=VALUE|
35-
|Tag|Optional tag to identify events in the syslog. If empty, syslog will use the name of the daemon|
31+
|Name (string)| Name that identifies the logger: syslog, remote or remote_syslog|
32+
|Server (string)| Server address. Leave it empty to log events to the local daemon|
33+
|Protocol (string)| "tcp" or "udp". Only applicable if Server is not empty|
34+
|MaxConnectAttempts (integer, >= v1.7.1)|integer. Maximum attempts to connect to the server. 0 will try to reconnect indefinitely. |
35+
|ConnectTimeout (string)|Default "5s". In Golang's Duration format https://pkg.go.dev/time#ParseDuration |
36+
|WriteTimeout (string)|Default "1s". If we fail sending the event to the server, after 10 failures we'll reopen the connection with the server.|
37+
|Workers (integer) | Default 1. Number of workers to handle events |
38+
|Format (string) | Supported formats: rfc3164, rfc5424, csv or json. RFC5424 will log events witht the format KEY=VALUE|
39+
|Tag (string) | Optional tag to identify events in the syslog. If empty, syslog will use the name of the daemon|
3640

3741
After modify the configuration, restart OpenSnitch.
3842

0 commit comments

Comments
 (0)