Receiving Windows DHCP logs are missing
Please give me some advice. When I used nxlog to receive DHCP server logs, I found that the logs were missing and the nxlog logs showed error messages.
INFO inode changed for 'E:\DHCP\DhcpSrvLog-Fri.log' (56→56): reopening possibly rotated file
This is the configuration file in nxlog
## Please set the ROOT to the folder your nxlog was installed into, otherwise it will not start.
define NCloud 192.168.8.4
define DhcpPath E:\DHCP
define ROOT C:\Program Files\nxlog
define CERTDIR %ROOT%\cert
define CONFDIR %ROOT%\conf
define LOGDIR %ROOT%\data
define LOGFILE %LOGDIR%\nxlog.log
LogFile %LOGFILE%
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
## Load the modules needed by the outputs
<Extension syslog>
Module xm_syslog
</Extension>
## For DHCP log file use the following:
<Input in_dhcplog>
Module im_file
File '%DhcpPath%\Dhcp*.log'
SavePos TRUE
ReadFromLast TRUE
</Input>
<Output out_dhcplog>
Module om_udp
Host %NCloud%
Port 514
Exec $SyslogFacilityValue = 20;
Exec to_syslog_bsd();
</Output>
<Route dhcplog>
Path in_dhcplog => out_dhcplog
</Route>
nxlog log file
2024-07-19 11:02:33 WARNING stopping nxlog service
2024-07-19 11:02:33 WARNING nxlog-ce received a termination request signal, exiting...
2024-07-19 11:04:55 INFO nxlog-ce-3.1.2319 started
2024-07-20 00:00:12 ERROR apr_stat() failed on file E:\DHCP\DhcpSrvLog-Sat.log; 存取被拒。
2024-07-20 00:00:12 ERROR apr_stat() failed on file E:\DHCP\DhcpV6SrvLog-Sat.log; 存取被拒。
2024-07-20 00:00:14 WARNING input file was deleted: E:\DHCP\DhcpV6SrvLog-Sat.log
2024-07-20 00:00:14 WARNING input file was deleted: E:\DHCP\DhcpSrvLog-Sat.log
2024-07-21 00:00:37 ERROR apr_stat() failed on file E:\DHCP\DhcpSrvLog-Sun.log; 存取被拒。
2024-07-21 00:00:37 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Sun.log' (61->59): reopening possibly rotated file
2024-07-21 00:00:39 WARNING input file was deleted: E:\DHCP\DhcpSrvLog-Sun.log
2024-07-22 00:00:04 ERROR apr_stat() failed on file E:\DHCP\DhcpV6SrvLog-Mon.log; 存取被拒。
2024-07-22 00:00:04 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Mon.log' (62->61): reopening possibly rotated file
2024-07-22 00:00:06 WARNING input file was deleted: E:\DHCP\DhcpV6SrvLog-Mon.log
2024-07-23 00:00:30 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Tue.log' (65->64): reopening possibly rotated file
2024-07-23 00:00:30 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Tue.log' (64->63): reopening possibly rotated file
2024-07-24 00:00:56 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Wed.log' (67->66): reopening possibly rotated file
2024-07-24 00:00:56 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Wed.log' (66->65): reopening possibly rotated file
2024-07-25 00:00:24 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Thu.log' (55->55): reopening possibly rotated file
2024-07-25 00:00:24 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Thu.log' (54->54): reopening possibly rotated file
2024-07-26 00:00:49 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Fri.log' (57->57): reopening possibly rotated file
2024-07-26 00:00:49 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Fri.log' (56->56): reopening possibly rotated file