Log to the active Splunk agent, which can either be to a log file in a folder or an HTTP call to a Splunk Server.
Syntax
LogEvent=[level],"EventText Expression"
•level: (default=Error)--will be added to Splunk log as the level for the log entry
•Text Expression: Starting and ending with matching quotes or apostrophe -- can include Field values using Handlebars syntax
Example-AS400/IBMi User Locked Out
ScreenName=UserLocked
Recog=24,1,CPF1394
WhenState=*
LogEvent=ERROR,"User '{{userName}}' on Host '{{hostName}}' has been locked-out from Logging on as Host User '{{HostID}}'"
SetState=Exit
