256 sources limit

Back to conversation about current workaround... Windows Server 2016 has more than 256 channels. Is it possible to create a second thread/instance to subscribe for the remaining channels? I can try to guess and create XML filter to exclude some unneeded for now but tomorrow MS can create more channels with some update and would be nice if it handled automatically.

AskedJuly 28, 2017 - 1:41am

Can NXLog collect Windows XML Event logs vs Rendered Logs?

NXLog IM_MSVistaLog module collects the Rendered Event log rather than the raw XML Windows Event Log.  

Is there a configuration option in the NXLog agent or IMVistaLog module to enable collecting the original Windows XML Event Log rather than the Rendered Event Log?

Best Regards,



Edit: Think I worked this out. Appears to collect the XML data but also the rendered log field. This would lead questions to be:

AskedJune 14, 2017 - 10:32pm

Windows Eventlog - registry ref objects do not resolve

I am new and I apologies in advance if this question has been asked already.


I am us nxlog to forward windows eventlogs (json format) to central logging system.

Not all object are resolved in the message … example.

Object: Object Server:

DS Object Type: %{e0fa1e8c-9b45-11d0-afdd-00c04fd930c9}

Object Name: %{cc0985a1-b646-4957-bb95-ac8fe9ad147a}


AskedNovember 24, 2015 - 4:27pm