We recently repaired our log anaytics - updated brcm and syslog-ng.
We are successfully ingesting (into DXO) Linux logs from the brcm server but not Cisco logs even though we see them in the log stream on the syslog-ng server
Cisco Logs are appearing as expected after deeper customer investigation. They will add additional filtering to remove kernel messages from syslog-ng.