Audit log / syslog per customer

Hi,

Our Avamar environment has multiple domains, each with one customer. Now one of these customers wants to have an audit log to proof that no unauthorized users have access to their backups. So we were thinking of creating a syslog template with the IP of one dedicated syslog server for that customer.

But we see that all syslog events end up on that syslog server and not just the one for the customer's domain.

How can we separate or filter those logs, so the customer doesn't see the logs from other customers?

Regards

Gabrie