When I follow https://community.rsa.com/docs/DOC-77102 I don't have the directory mentioned in step 2 below. I can get to /opt/rsa/am but no certs directory. Any recommendations?
2. Copy the remote syslog public certificate to the directory /opt/rsa/am/certs/remoteSyslogServer.
Create the directory.
It is just a workspace to hold your files and be able to follow along with the steps, but that specific directory is not part of the default installation.
The help menu system on Authentication Manager also has the same steps as the article you referenced. Use 'rsyslog' as a search term in help menu.