User: dlang Forumlink: http://kb.monitorware.com/viewtopic.php?p=26348#p26348 Message: ---------- another good trick is to setup an action that writes to a local file with the same template that you use to forward to the SIEM server. Then you will see exactly what is being sent.