Config file to extract MS Exchange logs to syslog format over TCP

View thread

loghero

Hi there ,

I am stranded with a problem of sending exchange server logs in syslog format over TCP. 

I performed a trial for fetching connect logs and using the csv module and send them over syslog format over TCP.

Once I run the service , I dont get any output over TCP , nor any errors. I wanted to know what im doing wrong. Please help !

(((PS I removed my destination IP and port )))

define ROOT C:\Program Files\nxlog#define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modulesCacheDir %ROOT%\dataPidfile %ROOT%\data\nxlog.pidSpoolDir %ROOT%\dataLogFile %ROOT%\data\nxlog.log

<Extension syslog>   Module  xm_syslog</Extension>

<Extension _exec>   Module  xm_exec</Extension>

<Extension csv>   Module    xm_csv   Fields    date-time, connector-id, session-id, sequence-number, \             local-endpoint, remote-endpoint, event, data, context</Extension>

<Input in>Module im_fileFile "C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\Hub\Connectivity\CONNECTLOG*.LOG"       <Exec> csv->parse_csv(); to_syslog_ietf();</Exec></Input>

<Output out>   Module    om_tcp   Host      ####    Port      ####          Exec      to_syslog_bsd();</Output>

<Route 1>   Path      in => out</Route>