No.
I use a service from Barracuda Networks to filter email. I need to be able to search the log for certain domains and receive a notification of the messages was quarantined or blocked. Nearly 100% of google hosted domains do not have SPF/DKIM/DMARC setup correctly. Google doesn't make them do it, but then again 50% of spam comes from gmail and gmails reporting is unworkable.
Anyway, we can't just add these domains to the allow list and the only way to search the log is manually or via syslog. But the syslog also has a bunch if irrelevant stuff I want to ignore.
I also want non-admin users to be able to add domains to the search list.
So, I want to receive syslog records and then process them without using our normal syslog server.