Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Network Performance Monitor (NPM) > NPM - Knowledgebase Articles > Error decoding packet for Syslog RFC 3164 formatting

Error decoding packet for Syslog RFC 3164 formatting

Created by Eric Bryant, last modified by Juan.Roa on Feb 11, 2019

Views: 1,549 Votes: 2 Revisions: 9

Updated February 12, 2019


Nodes sending Syslog messages to Orion server may follow RFC 3164 formatting that the SolarWinds Syslog service cannot read by default. This article demonstrates how to enable decoding for this format in the advanced configuration page of the web console.


C:\ProgramData\Solarwinds\Logs\Orion\SyslogService.log will show log entries of this behavior below:


WARN SolarWinds.Orion.Common.SWEventLogging - Error Decoding Packet Decode packet failed, packet missing starting '<' Original packet is:


Orion Platform


  1. Access the advanced configuration page or the web console.
  2. In GLOBAL tab, look for EnableRfcRelay under SyslogServce.SyslogSettings
  3. Tick the checkbox and click SAVE
  4. Restart the SolarWinds Syslog Service for the changes to take effect
    Restart SolarWinds Syslog Service

More details about RFC 3164 and RFC 5424 here.

Last modified