(Optional) Process Raw Syslog Data without Priority Field(Optional) Process Raw Syslog Data without Priority Field
You have the option to process raw syslog data that does not contain a valid priority (PRI) field.
To configure a Log Decoder to process syslog without a Priority field:
- Go to
(Admin) > Services, select the Log Decoder service and
> View > System.
- Select Stop Capture (
).
- From the drop-down menu, where System is shown, select Explore.
- Select decoder > config.
-
In the capture.device.params field, add the following text, and then click Enter to save the changes:
requirePri=false
- From the drop-down menu, where Explore is shown, select System.
- Select Start Capture (
). The change takes affect after capture is restarted.