Receiving Windows DHCP logs are missing


#1 Chung Wang

Please give me some advice. When I used nxlog to receive DHCP server logs, I found that the logs were missing and the nxlog logs showed error messages.

 

INFO inode changed for 'E:\DHCP\DhcpSrvLog-Fri.log' (56→56): reopening possibly rotated file

 

 

#2 Chung Wang

This is the configuration file in nxlog

## Please set the ROOT to the folder your nxlog was installed into, otherwise it will not start.
define NCloud   192.168.8.4
define DhcpPath E:\DHCP
define ROOT     C:\Program Files\nxlog
define CERTDIR  %ROOT%\cert
define CONFDIR  %ROOT%\conf
define LOGDIR   %ROOT%\data
define LOGFILE  %LOGDIR%\nxlog.log
LogFile %LOGFILE%

Moduledir %ROOT%\modules
CacheDir  %ROOT%\data
Pidfile   %ROOT%\data\nxlog.pid

## Load the modules needed by the outputs
<Extension syslog>
 Module xm_syslog
</Extension>

## For DHCP log file use the following:
<Input in_dhcplog>
 Module       im_file
 File         '%DhcpPath%\Dhcp*.log'
 SavePos      TRUE
 ReadFromLast TRUE
</Input>

<Output out_dhcplog>
 Module om_udp
 Host   %NCloud%
 Port   514
 Exec   $SyslogFacilityValue = 20;
 Exec   to_syslog_bsd();
</Output>

<Route dhcplog>
 Path  in_dhcplog => out_dhcplog
</Route>
 

 

 

nxlog log file

2024-07-19 11:02:33 WARNING stopping nxlog service
2024-07-19 11:02:33 WARNING nxlog-ce received a termination request signal, exiting...
2024-07-19 11:04:55 INFO nxlog-ce-3.1.2319 started
2024-07-20 00:00:12 ERROR apr_stat() failed on file E:\DHCP\DhcpSrvLog-Sat.log; 存取被拒。  
2024-07-20 00:00:12 ERROR apr_stat() failed on file E:\DHCP\DhcpV6SrvLog-Sat.log; 存取被拒。  
2024-07-20 00:00:14 WARNING input file was deleted: E:\DHCP\DhcpV6SrvLog-Sat.log
2024-07-20 00:00:14 WARNING input file was deleted: E:\DHCP\DhcpSrvLog-Sat.log
2024-07-21 00:00:37 ERROR apr_stat() failed on file E:\DHCP\DhcpSrvLog-Sun.log; 存取被拒。  
2024-07-21 00:00:37 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Sun.log' (61->59): reopening possibly rotated file
2024-07-21 00:00:39 WARNING input file was deleted: E:\DHCP\DhcpSrvLog-Sun.log
2024-07-22 00:00:04 ERROR apr_stat() failed on file E:\DHCP\DhcpV6SrvLog-Mon.log; 存取被拒。  
2024-07-22 00:00:04 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Mon.log' (62->61): reopening possibly rotated file
2024-07-22 00:00:06 WARNING input file was deleted: E:\DHCP\DhcpV6SrvLog-Mon.log
2024-07-23 00:00:30 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Tue.log' (65->64): reopening possibly rotated file
2024-07-23 00:00:30 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Tue.log' (64->63): reopening possibly rotated file
2024-07-24 00:00:56 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Wed.log' (67->66): reopening possibly rotated file
2024-07-24 00:00:56 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Wed.log' (66->65): reopening possibly rotated file
2024-07-25 00:00:24 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Thu.log' (55->55): reopening possibly rotated file
2024-07-25 00:00:24 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Thu.log' (54->54): reopening possibly rotated file
2024-07-26 00:00:49 INFO inode changed for 'E:\DHCP\DhcpV6SrvLog-Fri.log' (57->57): reopening possibly rotated file
2024-07-26 00:00:49 INFO inode changed for 'E:\DHCP\DhcpSrvLog-Fri.log' (56->56): reopening possibly rotated file