I have set up a rsyslog-server to receive firewall logs from a Sophos XGS4300 over TLS.
The connection is working fine and Iam receiving logfiles from the firewall.
BUT in a single (syslog) message (%msg%) I receive many logs different logs (up to around 20-30) concatenated. That makes processing the logs extremly hard (my goal is to forward the logs to a SIEM). The logs are separted by the delimter #000<30>.