> ## Documentation Index
> Fetch the complete documentation index at: https://docs.honeycomb.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Syslog

<Badge className="hny-badge-enterprise-addon" stroke>Ent+</Badge>

<Note>
  This feature is available as an add-on for the [Honeycomb Enterprise plan](https://www.honeycomb.io/pricing/).
  Please contact your Honeycomb account team for details.
</Note>

## Supported Platforms

| Platform | Metrics | Logs | Traces |
| :------- | :------ | :--- | :----- |
| Linux    |         | ✓    |        |
| Windows  |         | ✓    |        |
| macOS    |         | ✓    |        |

## Configuration Table

| Parameter                          | Type     | Default   | Description                                                                                                                                                                                                   |
| :--------------------------------- | :------- | :-------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| protocol\*                         | `enum`   | "rfc3164" | The RFC protocol to use when parsing incoming syslog. Valid values are `rfc3164` or `rfc5424`.                                                                                                                |
| connection\_type                   | `enum`   | udp       | The transport protocol to use. Valid values are `udp` or `tcp`.                                                                                                                                               |
| data\_flow                         | `enum`   | high      | Enable high flow or reduced low flow.                                                                                                                                                                         |
| listen\_port\*                     | `int`    | 5140      | The port to bind to and receive syslog. Collector must be running as root (Linux) or Administrator (windows) when binding to a port below 1024.                                                               |
| listen\_ip\*                       | `string` | "0.0.0.0" | The IP address to bind to and receive syslog.                                                                                                                                                                 |
| timezone                           | `enum`   | UTC       | RFC3164 only. The timezone to use when parsing timestamps.                                                                                                                                                    |
| enable\_octet\_counting            | `bool`   | false     | Whether or not to parse using a trailer character. This is a special character that will be the termination character for syslog messages. This is only applicable to `tcp` and `rfc5424` configurations.     |
| non\_transparent\_framing\_trailer | `enum`   | LF        | Whether or not to enable octet counting on syslog framing. This framing allows for the transmission of all characters inside a syslog message. This is only applicable to `tcp` and `rfc5424` configurations. |
| enable\_mutual\_tls                | `bool`   | false     | Whether or not to use mutual TLS.                                                                                                                                                                             |
| cert\_file                         | `string` |           | Path to the TLS cert to use for TLS-required connections.                                                                                                                                                     |
| key\_file                          | `string` |           | Path to the TLS key to use for TLS-required connections.                                                                                                                                                      |
| ca\_file                           | `string` |           | When set, enforces mutual TLS authentication and verifies client certificates.                                                                                                                                |
| tls\_min\_version                  | `enum`   | "1.2"     | The minimum TLS version to support. 1.0 and 1.1 should not be considered secure.                                                                                                                              |

<span style={{color: 'red'}}>\* *required field*</span>