Hi Curtis,
Somehow it worked after reinstalling Kiwi Syslog....not sure why....but...thanks for your help.
May i ask for point 5. The Severity level is applied to all forwarded logs <- does this mean all logs forwarded to the Kiwi or whichever SIEM will see only the severity level that is set on this LEM (eg Informational).
The LEM cannot just forward the original severity?
