Syslog playbook fails with Tag must not be longer than 32 characters error

Issue

Trying to send a Syslog message as an Automate action via a playbook, but it fails with a "Tag must not be longer than 32 characters" error. 

Resolution

USE an attribute that will be less than 32 characters such as $Detection.id:

or simply custom text for the field:

Cause

The Tag in this case for a syslog message is the "Syslog program" field in Red Canary. Any attribute or text used for this field must be 32 characters or less. So, for instance, using $detection.headline wouldn't work as the actual URL would be longer than 32 characters in most cases.