I have installed syslog connector for collect bluecoat logs. I added to the esm and I noticed all message list under name column . What is the reason it?
yes, it is Blue Coat Proxy SG Multiple Server File connector.
Also this will match all the Fields correctly.
But you will have to configure proxy to forwards log files through FTP. Refer the configuration guide for setting it up.
Is the log file being transferred from your BlueCoat SG appliance to your VM successfully? Did you try the "Test Upload" option on the BlueCoat appliance to upload the log files instantly?
Is there connectivity between your BC SG appliance and your FTP server? Ensure there's no FW blocking ports TCP 20,21.