Identify CbDefense org in notifications about cbc-syslog

[askthedragon]

Currently it is implemented to use the stanza name as the source. Is this not good enough, should I also include the serverurl? or is there another suggestion?. So right now now if you have a stanza with the name [your org1] the syslog will start with 'source= 'your org1'.

[askthedragon]

Also what I'll do is add a sample input/output to the documentation so you guys can take a look

[jscarpaciCB]

Thanks Jason, I didn’t know that about the Stanza name so the sample input/output would definitely help. I’m still working on setting up in my lab to see for myself. This was a question we had from a partner today and I didn’t know that the stanza name was included in the output.

From: Jason McFarland [mailto:[email protected]]
Sent: Tuesday, October 11, 2016 4:27 PM
To: carbonblack/cb-defense-syslog-tls [email protected]
Cc: Justin Scarpaci [email protected]; Author [email protected]
Subject: Re: [carbonblack/cb-defense-syslog-tls] Identify CbDefense org in notifications (#4)

Also what I'll do is add a sample input/output to the documentation so you guys can take a look

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub #4 (comment) , or mute the thread https://github.com/notifications/unsubscribe-auth/AUOUtCw39iPXUGKbP5uqU-i6I7m5l0Rrks5qy_EAgaJpZM4KT_WC .

[askthedragon]

I have added a sample output file in the test directory