Загрузка данных

sudo nano /etc/syslog-ng/conf.d/drweb-siem.conf

destination d_drweb_siem {
    network(
        "192.168.100.5"
        port(514)
        transport("tcp")
    );
};

filter f_drweb {
    program("^drweb-");
};

log {
    source(s_src);
    filter(f_drweb);
    destination(d_drweb_siem);
};

sudo /usr/sbin/syslog-ng -s