Weird NXLOG behavior sending wrong data | Log collection solutions

#1 wilsonchua 8 years ago

I installed NXLOG onto our windows server. I setup INPUT to send the c:\squid\var\logs\access.log to our graylog server.

I restarted the NXLOG service.

On the graylog service, i still keep getting windows event log instead of the squid proxy logs.

Has anyone encountered this before?

Permalink

#2 adm Nxlog ✓ 8 years ago (Last updated 5 years ago )

#1 wilsonchua

I installed NXLOG onto our windows server. I setup INPUT to send the c:\squid\var\logs\access.log to our graylog server. I restarted the NXLOG service. On the graylog service, i still keep getting windows event log instead of the squid proxy logs. Has anyone encountered this before?

This is usually caused by the PBCK, else your data ingestion might have fallen behind and you are still seeing data from earlier when your previous conf was in use. See the troubleshooting tips in the manual.