| Argument | Type | Description |
|---|
| name ( mandatory ) | string | |
| target ( mandatory ) | enum (memory | disk | echo | remote | email | script | cmr) { memory:0, disk:1, echo:2, remote:3, email:4, script:5, cmr:6 } | |
| memory-lines | num | |
| memory-stop-on-full | bool | |
| disk-file-name | string | |
| disk-lines-per-file | num | |
| disk-file-count | num | |
| disk-stop-on-full | bool | |
| remote | alt { ipv6: ip6Addr
, ip: ipAddr
, hostname: string
} | |
| remote-port | num | |
| src-address | alt { ipv6: ip6Addr
, ip: ipAddr
} | |
| remote-log-format | enum (default | syslog | cef) | |
| remote-protocol | enum (udp | tcp | tls) | |
| check-certificate | bool | |
| cef-event-delimiter | string | |
| syslog-time-format | enum (bsd-syslog | iso8601) | |
| syslog-facility | enum (kern | user | mail | daemon | auth | syslog | lpr | news | uucp | cron | authpriv | ftp | ntp | local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7) { kern:0, user:1, mail:2, daemon:3, auth:4, syslog:5, lpr:6, news:7, uucp:8, cron:9, authpriv:10, ftp:11, ntp:12, local0:16, local1:17, local2:18, local3:19, local4:20, local5:21, local6:22, local7:23 } | |
| syslog-severity | enum (auto | emergency | alert | critical | error | warning | notice | info | debug) { auto:0xffffffff, emergency:0, alert:1, critical:2, error:3, warning:4, notice:5, info:6, debug:7 } | |
| email-to | string | |
| email-cc | multi { array-id, cc: string
} | |
| email-start-tls | bool | |
| remember | bool | |
| add-topics-string | bool | |
| script | enum () | |
| vrf | enum () | |