Providing Log Management
solutions for everyone

GET STARTED NOW!

Check out our products and services

DOWNLOAD BROCHURE

Log Collection Solutions

In addition to the features that our NXLog Community Edition users love such as the flexibility, low memory footprint and high performance, the NXLog Enterprise Edition contains dozens of enhancements and additional features which can be useful in enterprise deployments. These features are enhanced reliability, support for additional log sources such as CheckPoint LEA, NetFlow and SNMP events, agent management and monitoring capabilities, remote Windows EventLog collection, ODBC input and output modules to read/write data into databases (e.g. Microsoft SQL Server) and many more.

Managing and monitoring a large number of log collector agents can be tough, especially if you have a lot of servers in different roles with multiple teams in charge. NXLog Manager can remotely manage and monitor NXLog Enterprise Edition instances using a centralized web based management console.

The NXLog Community Edition is an open source log management tool available at no cost. It is available for various platforms including Windows and GNU/Linux. The NXLog Community Edition is used by thousands worldwide from small startup companies to large security enterprises and has over 70,000 downloads to date. Its flexibility allows it to be utilized in various setups and can be used both as a log collector agent and as a log server.

NXLog Chatter

This podcast discusses Windows Event Forwarding (WEF) by/for IT security practitioners. NXLog EE can be configured for Windows Event Forwarding. See the YouTube description for additional links including a link to NXLog conf example.

2018.11.23. 08:46

The blog post written by Rapid7 is a step-by-step walkthrough of using NXLog to transform an ingress authentication log into UEF.

2018.10.17. 10:10

Can you make this happen for free? No doubt. As one Reddit member says - "Our org for $0 yearly does the following. Dump every log using NXLog to Graylog."

2018.09.25. 14:35

NXLog News

Nov 29

We have released November Edition of NXLog Newsletter, which contains information on new releases of NXLog products and detailed information on User Guide updates and improvemen...

Nov 19

NXLog Community Edition version 2.10.2150 is now available as of November 16 2018. The download and upgrade instructions are available for each platform in the User Guide under ...

Nov 19

NXLog Manager v5.1.5116 is now available as of November 14 2018. Download and upgrade instructions are available for each platform in the User Guide under the NXLog Manager Inst...

Aug 28

The NXLog Enterprise Edition v4.0 was released earlier this year. If you have missed it, read the release announcement here. We have been busy this summer, and are happy to brin...

What Users Say

In researching how to get nxlog up and running, I found the configuration syntax easy to use and really flexible. Thank you very much for the excellent program NXLOG.

Have already spent lots of time testing other opensource tools, but none suited so far, only nxlog has helped this far that too with less memory, CPU and IO :)

While I have used both rsyslog and syslog-ng, I am now drawn towards nxlog as a more powerful tool. It does a lot natively in terms of log massaging and organization. Take a look at it when you have the chance.

Faced with no budget and the reality of a heterogeneous environment I discovered that ONLY nxlog and Splunk will sensibly (i.e. structured) capture Windows logs while providing TCP, TLS and buffering. I settled on nxlog agents on the servers forwarding to an nxlog receiver...

On Linux systems, there are many options for converting arbitrary logfiles into syslog. For Microsoft Windows, there are reasonable free options for converting Eventlogs to Syslog, such as SNARE. There are excellent, but expensive tools like Splunk for parsing any sort of data you like. But I really struggled to find anything that could run on Microsoft Windows, convert a custom logfile to syslog, and send it to two destinations simultaneously. After much fruitless searching, and more than a few dead-ends, I found the answer: nxlog. http://lkhill.com/nxlog-convert-to-syslog/

I definitely prefer the way you present configuration to that of rsyslog etc. I have suggested nxlog to some customers however as far better option to collectors from the likes of Arcsight...

nxlog is a lot leaner and does a great job pulling Windows Event Log data and forwarding it to Logstash using JSON or GELF. Its configuration syntax is also a lot more robust and full-featured than Logstash's, so you might find it easier to do complex things with your event logs before you forward them, like filtering out noisy logs before they ever get to the server.

Nice work on nxlog, it's a great product!

This is an extremely slick and configurable tool...

So overall, NxLog is amazing. It allows you to take the load off of your central syslog cluster and distribute it across all of your endpoints that are generating logs. This also decreases the amount and size of events coming into your cluster from the start so you are only getting exactly the items that you need.

Our Partners

SolarWinds Loggly® is an easy-to-use, cloud based service for monitoring, log analysis, and collaboration. Since 1999, SolarWinds' mission has been to provide purpose-built products that are designed to make jobs easier for technology professionals.

FireEye is an enterprise cybersecurity company that provides products and services, innovative security technologies and nation-state grade threat intelligence to protect against advanced cyber threats.

TEHTRI-Security is a French company specialized in cutting-edge IT Security technologies. Their eGambit solution is a defensive cyber weapon system that includes SIEM, Endpoint Security and Artificial Intelligence.

Raijin Ltd develops database products suitable for ingesting and storing event log data.

IS-Systems is a Russian systems integrator providing IT security services.

AlienVault is a leading provider of SIEM products that include the Unified Security Management® (USM) platform which combines key security capabilities with expert threat intelligence.

5thColumn, LLC is a full service information technology company centered on next generation cyber threat protection and enterprise data security.

Aster Security is a US based company providing products and professional services focusing on IT security.

Securonix is a provider of Next-Gen SIEM and EUBA solutions and is redefining the next generation of cyber-threat detection using the power of machine learning and big data.

Radarservices is a Managed Security Services Provider based in Austria using a unique combination of automated risk detection and analysis tools combined with risk and security experts running a cyber defense center.

LogPoint is a security analytics company based in Denmark providing a SIEM solution to turn big-data into real-time insights.

Infosecurity LLC is an IT security services provider and integrator in Russia.

Symtrex is a cyber security solutions provider with focus on consultancy and assist their customers in North America with cyber security issues, solutions and products.