Hi,
I transmitted IIS logs and message tracking logs from one server to the other through nxlog and saved it in a location.
After complete transmission I stopped the nxlog service.
I was able to understand that the transmission is complete and I downloaded the data and was working on it.
suddenly within 10 minutes few files are lost under IIS and message tracking.
Hi,
I'm trying to parse a csv log file from my local and store it again in another location in my local. But I see it is not happening.
The config has no errors. the destination file is same as source file with respect to file properties.
Can you tell whether any specific check should be done?
Can you explain what exactly happens in this block?
I don't get a clear explanation of what "xEF\xBB\xBF" means in the below code and why it is having drop ()? .
<Exec>
if $raw_event =~ /^(\xEF\xBB\xBF)?(date-time,|#)/ drop();
else
{
csv_parser->parse_csv();
$EventTime = parsedate(${date-time});
}
</Exec>
Hi,
I would like to know the cost of enterprise edition.
Also, I would like to know whether we could use the purchased nxlog EE package in more than one server to collect logs?
i want to send my atp log to syslog server with the help of nxlog . i am storing atplog to atp.log file and the data is in json format.
I am using below configuration but i am not getting anything on my syslog server which is AV.
configuration:
# Configuration for converting and sending Windows logs
# to AlienVault USM Anywhere.
#
