dcbd appname logs coming in from ESXi look to be multiple lines causing issues when forwarding the logs to another team for review.
VMware Aria Operations for Logs 8.x
dcbd logging in ESXi 7.0 versions prior to update 3l are overly verbose including empty lines that are sent to Aria Operations for Logs as individual events via syslog
Example
2022-03-27T00:40:27.679Z dcbd[#]: [info] *** Received pre-CEE DCBX Packet on port: vmnic1
2022-03-27T00:40:27.679Z dcbd[#]: [info]
2022-03-27T00:40:27.679Z dcbd[#]: [info] Src MAC: ##:##:##:##:##:##
2022-03-27T00:40:27.679Z dcbd[#]: [info] Dest MAC: ##:##:##:##:##:##
2022-03-27T00:40:27.679Z dcbd[#]: [info]
2022-03-27T00:40:27.679Z dcbd[#]: [info] Port ID TLV:
2022-03-27T00:40:27.679Z dcbd[#]: [info] ifName:
Upgrade ESXi to 7.0 U3l or higher
Workaround
text > does not match > * dcbd[*