Relay Log Forwarder

Generic syslog relay or log-forwarder messages without product-specific structure.

Global Fields (4)

FieldType
ngs.id
Unique identifier for the log entry.
string
ngs.createdAt
Timestamp when the event was created locally.
pdate
ngs.indexedAt
Timestamp when the log was indexed into the SIEM.
pdate
ngs.source
Origin or source system of the log.
string

Reference-Specific Fields (14)

FieldType
rlylog.severity
pint
rlylog.facility
pint
rlylog.priority
pint
rlylog.version
pint
rlylog.app_name
text_general
rlylog.proc_id
text_general
rlylog.msg_id
text_general
rlylog.structured_data
text_general
rlylog.message
text_general
rlylog.content
text_general
rlylog.tag
text_general
rlylog.hostname
text_general
rlylog.timestamp
pdate
rlylog.client
text_general

Sample Log Event

Below is a representative JSON log entry showing key fields as they’re emitted by the system. Depending on the context of the event, some fields may be omitted if they’re not applicable.