Options to send syslog in RFC5424 format

Products Threat Prevention Ideas
,
1

What is a one sentence summary of your feature request?

Add tags to NTP agent that allow RFC5424 to be matched.

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

Timestamps currently only present in local or UTC format. Timestamp format ISO 8601 should be available 2026-03-29T22:31:30.000Z. Product refers to itself as Netwrix Threat Prevention, spaces are not allowed in this format and should be Netwrix-Threat-Prevention.

How do you currently solve the challenges you have by not having this feature?

Currently no workaround as the SIEM being used is not ingesting events properly due to missing formats.

2

Hi Ian,

Thanks for this submission! What SIEM platform are they leveraging that only accepts RFC5424? I’ll review this with the team, but that information would help.