Catch logging from Windows network drives issue
Hello everyone,
I would like to catch a log from windows network drives, but I cannot did it.
May I know it is supported by nxlog? Would you please advise, thank you.
<Input filelogs>
Module im_file
File "\\\\192.168.1.1\\test\*"
SavePos TRUE
ReadFromLast TRUE
PollInterval 5
Exec $Message = $raw_event;
</Input>
NXLog.log:
2016-09-14 18:16:53 INFO nxlog-ce-2.8.1248 started
2016-09-14 18:16:53 ERROR failed to open \\192.168.1.1\test\*; Access is denied.
2016-09-14 18:17:03 ERROR apr_stat failed on file \\192.168.1.1\test\*; Access is denied.
2016-09-14 18:17:13 ERROR apr_stat failed on file \\192.168.1.1\test\*; Access is denied.
2016-09-14 18:17:23 ERROR apr_stat failed on file \\192.168.1.1\test\*; Access is denied.
2016-09-14 18:17:33 ERROR apr_stat failed on file \\192.168.1.1\test\*; Access is denied.
2016-09-14 18:17:53 ERROR apr_stat failed on file \\192.168.1.1\test\*; The filename, directory name, or volume label syntax is incorrect.
2016-09-14 18:18:33 ERROR apr_stat failed on file \\192.168.1.1\test\*; The filename, directory name, or volume label syntax is incorrect.
2016-09-14 18:19:43 ERROR apr_stat failed on file \\192.168.1.1\test\*; The filename, directory name, or volume label syntax is incorrect.
The share drvice is able to access by everyone, or guest.
This is a permissions issue and is not directly related to NXLog per se.
You should make sure that the local SYSTEM account that NXLog is running under has proper permissions to access the network share.
See this question on serverfault for example.