[rsyslog-notify] Forum Thread: Re: How to convert (from CEF to CSV) and forward a message ? - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25604#p25604

Message: 
----------
there are many ways to send logs out of rsyslog, omfwd is the most common
one to use (it's what gets invoked if you use @ip for UDP forwarding or
@@ip for TCP forwarding), but there are a lot of other ones available, with
different advantages and disadvantages for them. look at the spider diagram
on the main <!-- m --><a class="postlink"
href="http://rsyslog.com">http://rsyslog.com</a><!-- m --> page and you
will see the inputs and outputs supported. As long as you use a protocol
that's on both sides, it will work. This diagram is now slightly out of
date, we have a few more inputs and outputs than are shown here.

but I don't think that's really what you are asking. Why do you not want to
use omfwd? is there something you want that omfwd doesn't give you? or
something that omfwd does that you don't want?