SYSLOG data

z/OS® system log (z/OS SYSLOG) data can originate either from the z/OS user exits or the operations log (OPERLOG).

Data stream definition for SYSLOG data

Table 1 indicates the configuration values to use in defining this data stream in the Z Common Data Provider Configuration Tool.

Table 1. Data stream definition for SYSLOG data
Type of node in the policy Required configuration value
Data Stream One of the following values:
  • z/OS SYSLOG (for data from the z/OS user exits)
  • z/OS SYSLOG from OPERLOG (for data from the OPERLOG data stream)
Both data streams collect only the data from the system on which the z/OS Log Forwarder runs.
To select this data stream in the Configuration Tool: In the Select data stream window, click IBM Z Operational Log and Data Analytics > z/OS > Logs, and select the check box for the respective data stream.
Tip: You cannot define both a z/OS SYSLOG and a z/OS SYSLOG from OPERLOG data stream in the same policy.
Filter Transform Not required
Subscriber See Subscriber configuration.
Important: When you use the Generic Kafka subscriber protocol, you must select the CSV format. Key-Value format is not supported for this data stream definition.