# Raw message output
**URL:** https://discuss.elastic.co/t/raw-message-output/266895
**Category:** Logstash
**Created:** [March 11, 2021, 7:21am UTC](https://discuss.elastic.co/t/raw-message-output/266895 "2021-03-11T07:21:22Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@st1988](https://discuss.elastic.co/u/st1988)
#### Post date: [March 11, 2021, 7:21am UTC](https://discuss.elastic.co/t/raw-message-output/266895/1 "2021-03-11T07:21:22Z")
Hi, I currently have an issue where I am sending Syslog to Logstash and then forwarding to ELK and via syslog to a SIEM. The SIEM however is struggling to understand the log as think it is being sent in a format its not expecting. Is there a way to send normally to Elasticsearch and then just the raw message onto the syslog output.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 8, 2021, 7:22am UTC](https://discuss.elastic.co/t/raw-message-output/266895/2 "2021-04-08T07:22:12Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.