Sending logs to SIEM

[User73989784]

Hello. We set up sending syslogs from ePolicy Orchestrator to SIEM Splunk, they are successfully collecting but encoding is unreadable. How can we change encoding in syslogs?

[cdinet]

If they are unreadable, then typically either the siem isn't using the right ciphers or tls version.  We require tls 1.2 and epo requires certain ciphers.  See KB91296 and 91304.  See also KB91194 for communication requirements for syslog servers.