Error with multiple Host in <Output> om_tcp

I'm using nxlog-ce-2.11.2190.msi (Community Edition) on Windows 2016 to send Windows Logs to a syslog server.

If I put more than one Host to the <Output> section like

<Output to_splunk>
Module om_tcp
Host abc1.corp.net
Host abc2.corp.net
Host abc3.corp.net
Port 514
Exec to_syslog_ietf();

AskedOctober 29, 2021 - 11:00am

Get NXLog to use a random port for each connection

Hi All,

I wonder if someone can answer this for me.

According to the documentation, it states that for a UDP client, the localport will be a random high port as per https://nxlog.co/documentation/nxlog-user-guide/om_udp.html

I have a situation where I am sending Zeek logs via UDP through a Google Seesaw load balancer see https://github.com/google/seesaw

AskedAugust 18, 2020 - 6:08pm