NXlog service needs to be restarted to resume sending logs.

Hi guys,

I've got nxlog installed on a handful of Windows machines, forwarding event logs in a test environment.  I've noticed that if I restart the server receiving the logs, the clients won't resume sending until I've restarted the nxlog service.  Has anyone come up with a way around this?

The log file simply has many instances of:

Support ticket opened onNovember 20, 2015 - 5:29pm

nxlog parsing saved evtx files

Hi, Does nxlog enterprise support parsing of saved or exported evtx files?  I have netapp audit logs that are saved in evtx format and I'd like to nxlog to parse this (json) and send it to log server (ELK).   I'm currently evaluating the enterprise product and this ability would be one of the drivers for this product.  If this is possible, how would I configure it.  This is what I have in my conf file:

# Netapp
<Input file2>
    Module   im_msvistalog
    File     'z:\audit_testsvm_last.evtx'
    SavePos  TRUE


Support ticket opened onOctober 21, 2015 - 4:45pm

Checkpoint Docs

I am looking for the docs about how to use Checkpoint OPSEC with nxlog.  Thank you. 


Support ticket opened onJuly 30, 2015 - 4:21pm