This message was deleted.

It is, i run it at a couple of customers. there is a specific for AppFW and generic syslog. It requires an on-prem agent installed, which forward the events

Thanks for that Mads - appreciate it!