Update Doc:

Format message as CEE and begin message validation.  The incoming message originates a syslog message (RFC 5424) that has been received on the syslog endpoint and parsed into the following JSON format:

 {
 	"PRIORITY": "{RFC 5424 PRI}",
 	"VERSION": "{RFC 5424 VERSION}",
 	"ISODATE": "{RFC 5424 TIMESTAMP}",
 	"HOST": "{RFC 5424 HOSTNAME}",
 	"PROGRAM": "{RFC 5424 APPNAME}",
 	"PID": "{RFC 5424 PROCID}",
 	"MSGID": "{RFC 5424 MSGID}",
 	"_SDATA": {
 		"meniscus": {
 			"tenant": "{tenant_id}",
 			"token": "{message-token}"
 		},
 		"*any client_data": {*}
 	}
 	"MESSAGE": "{RFC 5424 MSG}"

 }

 After conversion to CEE, the message will have the following format:

 {
 	"pri": "{PRIORITY}",
 	"ver": "{VERSION}",
 	"time": "{ISODATE}",
 	"host": "{HOST}",
 	"pname": "{PROGRAM}",
 	"pid": "{PID}",
 	"msgid": "{MSGID}",
 	"msg": "{MSG}",
 	"native": "{_SDATA}"
 }