$ 0 0 Just saw this post. Did you get it working? I am doing the same thing with our cisco syslogs, forwarding to qradar via Kiwi. working just fine for me.If there are issues its likely in the filter applied.