diff --git a/docs/en/ingest-management/processors/processor-syslog.asciidoc b/docs/en/ingest-management/processors/processor-syslog.asciidoc index 5bafa1de2..3d95dcbe4 100644 --- a/docs/en/ingest-management/processors/processor-syslog.asciidoc +++ b/docs/en/ingest-management/processors/processor-syslog.asciidoc @@ -5,9 +5,12 @@ syslog ++++ -experimental[] - -The `syslog` processor parses RFC 3146 and/or RFC 5424 formatted syslog messages. +The syslog processor parses RFC 3146 and/or RFC 5424 formatted syslog messages +that are stored in a field. The processor itself does not handle receiving syslog +messages from external sources. This is done through an input, such as the TCP +input. Certain integrations, when enabled through configuration, will embed the +syslog processor to process syslog messages, such as Custom TCP Logs and +Custom UDP Logs. [discrete] == Example