ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Unable to change log format to forward a Remote Syslog Server


Article ID: 103655


Updated On:


CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM)


This covers log forwading from CA PIM 12.9 SP2 to RSA SIEM 10.6. 

Logs are forwarded from CA PIM to RSA SIEM in multiple lines. 
Syslog is receiving the logs in multiple lines, but not able to read. 
Is it possible to forward the logs form CA PIM in single line format.


CA PIM: 12.9 SP2 
OS: Windows 2012 r2 


Please use the testfix T6FA008.caz.
After applying the testfix you will be able to recieve the logs from the event forwarder in one line.