I need to send logs in CEF and LEEF format. The message part I can construct but the headers need to be customized as well.
Syslog headerFeb 8 09:49:47 srv005851 SSG[8,620]: INFO com.l7tech.log.custom.TEST: -4:
CEF headerDec 18 20:37:08 <local0.info> 10.217.31.247
Jan 18 11:07:53 192.168.1.1
Here is a good article how to change this in Apache
Apache Access logs in CEF over Syslog - Micro Focus SW Community
There is a tactical assertion called Log Message to Syslog that allows for custom syslog entries along with CEF formatted entries. To obtain this assertion, open a support ticket requesting this assertion and instructions on its usage.
Stephen HughesBroadcom Support