Add syslog output about openwec HOT 3 OPEN

Until this is implemented, a workaround can be (and an overkill) using the unixdatagram output to forward raw events to a tool that can process them further to conform to the requirements of different SIEMs.

https://github.com/cea-sec/openwec/blob/main/doc/outputs.md#unix-domain-socket

We do something similar using OpenWEC together with syslog-ng.

from openwec.

I have OpenWEC and rsyslog sharing a box - OpenWEC writing to files rsyslog reads from. That way any issues with the syslog server don't result in loss of logs. HTH.

from openwec.

I'll also add that a nice-to-have would be output to systemd-journald-remote, in the journald format, which has largely supplanted syslog on newer Linux distributions.

from openwec.