I've setup the Solarwinds Log Forwarder to send to a Kiwi Syslog box but the messages are getting extra characters added:
Bad:
Jul 30 2009 04:06:36 RHCFILE01 %Security: Security : Successful Network Logon:<013><010><013><010><009>User Name:<009>RHC-74X1SH1$<013><010><013><010><009>Domain:<009><009>REDHAWK<013><010><013><010><009>Logon ID:<009><009>(0x0,0x519E523F)<013><010><013><010><009>Logon Type:<009>3<013><010><013><010><009>Logon Process:<009>Kerberos<013><010><013><010><009>Authentication Package:<009>Kerberos<013><010><013><010><009>Workstation Name:<009><013><010><013><010><009>Logon GUID:<009>{c8240591-1ba0-e617-a909-569d830ada64}<013><010><013><010><009>Caller User Name:<009>-<013><010><013><010><009>Caller Domain:<009>-<013><010><013><010><009>Caller Logon ID:<009>-<013><010><013><010><009>Caller Process ID: -<013><010><013><010><009>Transited Services: -<013><010><013><010><009>Source Network Address:<009>172.16.22.28<013><010><013><010><009>Source Port:<009>0
Good:
Security: 540: REDHAWK\RHC-54J1NH1-LT$: Successful Network Logon: User Name: RHC-54J1NH1-LT$ Domain: REDHAWK Logon ID: (0x0,0x4FE6C2FF) Logon Type: 3 Logon Process: Kerberos Authentication Package: Kerberos Workstation Name: Logon GUID: {7f0bd825-0e9f-8f8a-5a4d-e5227e264dbe} Caller User Name: - Caller Domain: - Caller Logon ID: - Caller Process ID: - Transited Services: - Source Network Address: 172.16.22.148 Source Port: 0
Any ideas what could be causing this?
