What the RFC?! Making sense of syslog before you migrate

Syslog: it's everywhere, it’s ancient, and let’s be honest — it rarely shows up the way the RFC says it should. Before you cut over to Cribl Stream, it pays to understand exactly what you're dealing with and why it matters. In this talk, we’ll demystify the syslog format (yes, the actual RFC 3164 and 5424 stuff), look at what happens when data goes rogue, and explore how Cribl can help bring order to the chaos.

We’ll walk through real-world strategies for getting your environment ready — from setting up syslog for parallel testing to pre-configuring your Cribl routes, pipelines, and parsing logic. If you’ve ever stared at a syslog payload and muttered “what even is this,” this session is for you.

Speaker: Michael Kushma, Senior Cybersecurity Architect, Logicopia

## Follow Cribl

LinkedIn: https://www.linkedin.com/company/cribl/
Twitter: https://www.twitter.com/cribl_io
Sign up for a Cribl.Cloud account: https://cribl.cloud/signup/
Learn more about Cribl: https://cribl.io