| Argument | Type | Description |
|---|
| name ( mandatory ) | string | |
| target ( mandatory ) | enum (memory | disk | echo | remote | email | script | cmr) | |
| memory-lines | num { } | |
| memory-stop-on-full | bool { } | |
| disk-file-name | string { } | |
| disk-lines-per-file | num { } | |
| disk-file-count | num { } | |
| disk-stop-on-full | bool { } | |
| remote | alt { , ip6Addr
, ipAddr
, string
} | |
| remote-port | num { } | |
| src-address | alt { , ip6Addr
, ipAddr
} | |
| remote-log-format | enum (default | syslog | cef) | |
| remote-protocol | enum (udp | tcp | tls) | |
| check-certificate | bool { } | |
| cef-event-delimiter | string { } | |
| syslog-time-format | enum (bsd-syslog | iso8601) | |
| syslog-facility | enum (kern | user | mail | daemon | auth | syslog | lpr | news | uucp | cron | authpriv | ftp | ntp | local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7) | |
| syslog-severity | enum (auto | emergency | alert | critical | error | warning | notice | info | debug) | |
| email-to | string { } | |
| email-cc | multi { , array-id, string
} | |
| email-start-tls | bool { } | |
| remember | bool { } | |
| add-topics-string | bool { } | |
| script | enum () | |
| vrf | enum () | |