A Log Center for the gear with no agent of its own

What's included

• No new appliance — the receiver runs inside the agent already installed on a Windows computer on that network. Turn it on, set a port, and point the device at it.
• Both RFC3164 and RFC5424 lines are parsed, along with the non-standard layouts several routers, switches and Dell iDRAC send, and a line the parser doesn't recognise is kept anyway, never silently dropped.
• Search matches the device's own hostname, IP address and program as well as the message — a gap in some syslog tools that makes a device invisible to search by name.
• Open a message to read it in full, ask the AI Assistant about it (with the collecting computer's ID, so it can investigate that machine), or create a ticket straight from the row.
• An optional per-collector switch opens a normal alert, in the same feed as every other alert type, when a device sends a critical or error line. Each device gets its own alert, showing the most severe line of its latest batch, and it closes itself after 24 hours without a new one.
• Known harmless ARP address-mismatch lines (such as a Microsoft NLB cluster address) can be registered as exceptions, so they are dropped before they are stored or alerted on.