Be aware that running a separate syslog server now requires someone with sufficient knowledge and skill set to set it up and maintain it
So … a Linux admin? Like your Splunk infra admins already are?
August 03, 2020 at 10:53AM
via reddit https://www.reddit.com/r/Splunk/comments/i1h4l6/can_trend_micro_deep_security_logs_be_sent_to/g07ohuh?utm_source=ifttt