Vector vs. Fluentd message format incompatibility when forwarding logs to syslog in RHOL 6

Issue

• Log messages format, forwarded to syslog, is incompatible when using Vector compared to Fluentd being in Vector the message value quoted and in Fluentd without quotes

• After migrating from Fluentd to Vector, the third-party integrity tool parsing the logs received in the syslog server is broken cause by the message field being quoted.

• Vector message is surrounded with quotes:

  "message":"{'event type': 'Logging Configuration Change', 'userName': 'TE Test', 'event': 'test log event', 'log_type': 'openshift_audit'}"
  

• Fluentd message is not surrounded with quotes:

  "message": {'event type': 'Logging Configuration Change', 'userName': 'TE Test', 'event': 'test log event', 'log_type': 'openshift_audit'}