~~Please confirm about HPUX server how to install NXLOG server or client.
I'm catching up logs, but when they arrived to my Graylog, they take the actual date and not the old date.
I saw my logs and they don't have format date. They're csv, and I have this field :
and I need to assign it on the timestamp, but I don't kno how.
Could you help me please to convert this on a good format?
I tried this (I have a field called: FW_date_time on my source csv file):
I'm having some issues sending event logs from a windows 2012 R2 client using nxlog ce agent to a linux syslog-ng server. The tcp connection appears to be getting dropped by syslog-ng due to an invalid frame header.
I have NXLOG installed, and use UDP to receive and sent the servers logs. However, when I run the netstat command I found that there are packets on error and other received through unknown ports. See the lines shown :
123234944 packets received
223432 packets to unknown port received.
523455 packet receive errors
2111 packets sent
After a bit of trial and and lots of reading, I managed to get Graylog2 working like a charm
I'm using NXLOG to send the logs to Graylog via GELF UDP
Right now I'm just testing and trying diffrent things.
Right now I';m testing with just 4 servers (have close to 100) has consumed a fair bit of space
So to evaluate usage, I figured I'd just send the security logs (these are all Windows Servers)