{
  "packaging_version": "2",
  "type": "syslog",
  "name": "Syslog",
  "version": "1.0.0",
  "min_app_version": "0.1.0",
  "description": "Receive syslog messages for host visibility",
  "category": "System Logs",
  "icon": "file-text",
  "supported_modes": ["realtime"],
  "implementation": {
    "type": "container",
    "image": "ghcr.io/silentpulse/connector-syslog:1.0.0",
    "resources": { "cpu": "100m", "memory": "128Mi" },
    "scaling": { "min_replicas": 1, "max_replicas": 2 },
    "health_check": { "command": ["/connector", "--healthcheck"], "interval": 30, "timeout": 5 },
    "build": { "repository": "https://github.com/silentpulse/connectors" }
  },
  "fields": [
    { "name": "listen_addr", "type": "text", "required": true, "group": "connection", "label": "Listen Address", "default": "0.0.0.0:514" },
    { "name": "protocol", "type": "text", "required": false, "group": "connection", "label": "Protocol", "default": "udp" },
    { "name": "use_tls", "type": "boolean", "required": false, "group": "connection", "label": "Use TLS" },
    { "name": "hostname_field", "type": "text", "required": true, "group": "query", "label": "Hostname Field", "default": "hostname" },
    { "name": "facility_filter", "type": "text", "required": false, "group": "query", "label": "Facility Filter", "description": "Comma-separated syslog facilities" }
  ],
  "maintainer": {
    "name": "SilentPulse",
    "email": "support@silentpulse.io",
    "url": "https://silentpulse.io"
  },
  "repository": "https://github.com/silentpulse/connectors",
  "tags": ["syslog", "system-logs", "udp", "tcp", "rfc5424"],
  "readme": "# Syslog Connector\n\nReceive syslog messages (RFC 3164/5424) to detect which hosts are actively sending system logs.\n\n## Requirements\n\n- Network devices or servers configured to send syslog to SilentPulse\n- UDP/TCP port accessible from syslog sources\n\n## Configuration\n\nConfigure the listen address and protocol. The connector will extract hostnames from syslog headers.\n\n## Protocols\n\nSupports UDP (default), TCP, and TCP+TLS. Use TLS for secure syslog transport (RFC 5425).",
  "notes": {
    "requirements": "Network access from syslog sources to SilentPulse cluster on configured port",
    "configuration": "Set listen address and protocol. Default: UDP on 0.0.0.0:514.",
    "limitations": "Realtime mode only. UDP messages may be lost under heavy load."
  }
}