Forward device logs to Linivo with TLS encryption instead of plaintext UDP, so log contents aren't exposed on the wire.
Turn on the syslog-TLS listener under Settings > Sensors > (this sensor) > Log ingestion; it listens on TCP/6514 by default and generates a certificate for you, or accepts your own.
Configure the sending device or log shipper (rsyslog, syslog-ng, or the device's native syslog client) to use TCP with TLS, targeting the sensor's IP on port 6514.
# rsyslog.conf
action(type="omfwd" target="10.20.0.50" port="6514" protocol="tcp"
StreamDriver="gtls" StreamDriverMode="1" StreamDriverAuthMode="x509/name")
Check Devices > (this device) > Logs for incoming entries. A TLS handshake failure here is almost always a certificate trust issue between the sender and the sensor.