The issue seems to be on sending; I think a better troubleshooting tool is the Kiwi Syslog Generator to verify the server can receive and the agent can send via syslog. The problem is with the query in Event Log Forwarder but I can't find what's wrong and neither the setup instructions nor the online help yield any meaningful info.
↧