Lets say I want my syslogng to receive messages in CEF format.
Is it possible to configure it to farward the message via http with the message as body? the type of the input will just be TEXT? will that be a POST call?
Yes, you can forward log messages using HTTP, see