[rsyslog-notify] Forum Thread: Re: Rsyslog to Forward Logs As IS - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25624#p25624

Message: 
----------
The message is getting parsed correctly, it is sending the <14> in the
message (that's what's being parsed into the <user:info> section of your
result)

what type of server is the final receiving system? It's very possible that
it doesn't handle the RFC5424 message correctly, and that's what's causing
it to put the wrong header on it.