ehlo550

I have read the Code of Conduct and I hereby accept the Terms

recheck

hi @rjha-splunk, can you maybe also have a look at this?

_I have read the CLA Document and I hereby sign the CLA_

recheck

I think this information is not reflected in the documentation but helps tremendously: https://splunk-usergroups.slack.com/archives/CNV918JCQ/p1648658161334779?thread_ts=1647621045.564949&cid=CNV918JCQ for any vendor/product source `_nix_syslog can be appended to route the fall through to the proper...

code block for timezone is broken: https://splunk.github.io/splunk-connect-for-syslog/main/troubleshooting/troubleshoot_resources/#fix-timezone

`echo 'Oct 5 10:34:23 dcstef11: dcstef11: 0000002e.0012bbc8 01a345ef Wed Oct 05 2022 10:34:21 +02:00 [kern_audit:info:2602] 8123e812314d123f :: dcstef11:ontapi :: 10.10.10.10:45878 :: dcfast1:ocum :: aggr-check-spare-low :: Success:' > /dev/udp/172.20.20.20/514`

there is also an issue with dtparse ``` date-parser-nofilter( format( '%a %d %Y %H:%M:%S %z', '%b %d %Y %H:%M:%S %z' ) template("${.tmp.timestamp}") ); ```

Hi @ikheifets-splunk, Thank you for confirmation. Regards Stefan