Store and Forward#

Once WinSyslog receives an event and it matches a rule, actions can store it locally and forward it to downstream systems.

Where to configure#

Actions is the entry point for all output and notification options.

Common storage targets#

Flat files: Write to File
Databases: Write to Database
Windows Event Log: Write to Event Log

Common forwarding targets#

Syslog: Forward Syslog
SETP: Forward via SETP
Email: Forward via Email
Interactive viewing: forward messages to InterActive SyslogViewer if you want to see incoming data live in the Interactive Syslog Viewer.

Recommended setup path#

Start with one storage action (file or database) to verify your rules.
Add a forwarding action after you are confident filtering is correct.
If you forward to a remote target, test connectivity and credentials early.

Next steps#

If you need reliable ingestion on the input side, see RELP listener.