Receiving syslog with a Splunk forwarder