nxlog

0
responses

wallet

is it possible to negate a match using pm_match? (nxlog ce version for now)

I am trying to us pm_pattern to filter messages that are approved for a 'limited' feed, and still have the full feed go to the admin feed.

I have set up the config to send the input to two feeds, that works fine. I've then tried to use pm_pattern to match certain strings and DROP them from the restricted feed. So far no luck. I'm sure I'm missing something really simple here, and would really appreciate if anyone had the time to check the configs for me...

AskedJune 8, 2021 - 9:07am

1
response

aurox3d_fc

SSL Encryption

Hi support,

1) We are trying to send logs from a server with NXLog agent installed to SIEM, with SSL/TLS (encrypted traffic)
Would it be possible to only use ONE certificate for each agent?

2) For NXLog manager and the agents is it possible to use only ONE CA for One agent?

nxlog,

AskedJanuary 11, 2021 - 8:19am

4
responses

How could I pass output of to_json() from nxlog.conf to perl file?

Hi, I have this type of input in nxlog.conf:

<Input udp>
    Module      im_udp
    Host        0.0.0.0
    Port        514
    Exec        parse_syslog(); to_json(); perl_call("process");
</Input>

My question is, how should I include that JSON output that I get from to_json() to my perl code? Should I write like this?:

AskedApril 3, 2020 - 11:11pm

3
responses

jacas

Trouble with NXlog Enterprise and SQL ODBC audit file.

Hello NXlog world!
I'm having some challenges to pull data from a SQL 2012 (running on W2K16) database using the im-odbc connector.
This is my input:

AskedOctober 16, 2019 - 8:58pm

1
response

Sangeetha

Data vanished from files after transmission

Hi,

I transmitted IIS logs and message tracking logs from one server to the other through nxlog and saved it in a location.
After complete transmission I stopped the nxlog service.
I was able to understand that the transmission is complete and I downloaded the data and was working on it.
suddenly within 10 minutes few files are lost under IIS and message tracking.

AskedMay 10, 2019 - 4:40pm

You are here