is it possible to negate a match using pm_match? (nxlog ce version for now)

I am trying to us pm_pattern to filter messages that are approved for a 'limited' feed, and still have the full feed go to the admin feed.

I have set up the config to send the input to two feeds, that works fine. I've then tried to use pm_pattern to match certain strings and DROP them from the restricted feed. So far no luck. I'm sure I'm missing something really simple here, and would really appreciate if anyone had the time to check the configs for me...

AskedJune 8, 2021 - 9:07am

SSL Encryption

Hi support,

1) We are trying to send logs from a server with NXLog agent installed to SIEM, with SSL/TLS (encrypted traffic)
Would it be possible to only use ONE certificate for each agent?

2) For NXLog manager and the agents is it possible to use only ONE CA for One agent?

AskedJanuary 11, 2021 - 8:19am