We setup a centralized syslog-ng server. We are receiving logs from multiple different sources without issue. The logs from CyberArk Vault server are the only logs delayed an hour or more with no line breaks for new lines. The Splunk CyberArk TA is installed on the syslog server and the search head. It does not appear logs are being parsed when sent to Splunk as expected. Any help would be appreciated.
