The syslog-ng Administrator Guide

The syslog-ng Agent for IBM System i application can output messages using the standard syslog (RFC 3164) format and the ArcSight Common Event Format. The ArcSight ESM software product is a security information and event management solution that uses a special log format called the Common Event Format (CEF).

The messages can be sent to remote servers over the network using UDP, TCP, or SSL-encrypted TCP connections.