Access event id with nxlog enterprise remotly

#1 FF_968534 3 years ago

Hi all

I'd like to know if I could access to windows log for a windows server 2003 without installing agent locally. I'd like to use only one nxlog on a central server (Linux Centos 7) and access to different server agentless.

Is it possible?

I see that an option is Using the im_wmi input module that can pull eventlog data remotely over the WMI protocol.

Do you have a sample in order to implement this option?

Thank you Franco

Permalink

#2 manuel.munozDeactivated Nxlog ✓ 3 years ago

#1 FF_968534

Hi all I'd like to know if I could access to windows log for a windows server 2003 without installing agent locally. I'd like to use only one nxlog on a central server (Linux Centos 7) and access to different server agentless. Is it possible? I see that an option is Using the im_wmi input module that can pull eventlog data remotely over the WMI protocol. Do you have a sample in order to implement this option? Thank you Franco

Buon giorno Franco,

Are you planning to use Community Edition or Enterprise Edition?

With EE you can collect Windows logs remotely without the need of installing agents on the sources. Please check this section in the user guide:

121.39. Windows Event Collector (im_wseventing)

https://nxlog.co/documentation/nxlog-user-guide-full#im_wseventing