Problem with forwarding multiline logs from Windows Server
Tags:
#1
JaVa
I'm having this newbie problem with sending logs from Windows Server 2008 R2. I tried to search a solution from here and from the user guide but can't find a solution. I'm getting this error message to nxlog.log:
WARNING Module filein1 has no input files to read
My config is this:
<Extension multiline1>
Module xm_multiline
HeaderLine /^\d{4}\-\d{2}\-\d{2}\s\d{2}\:\d{2}\:\d{2}\,\d{3}\s\d+/
#escape lines with whitespaces
Exec if $raw_event =~ /^\s*$/ drop();
</Extension>
<Input filein1>
Module im_file
File "C:\Program Files (x86)\CA\Some Manager\Connector Server\jcs\logs\LDAP_DYN\jcs_conn"
InputType multiline1
SavePos TRUE
Exec $SourceName = 'SomeManager';
</Input>
<Output out>
Module om_tcp
Host 192.168.1.1
Port 1468
Exec to_syslog_ietf();
</Output>
<Route 1>
Path filein1 => out
</Route>
What am i missing here? NXLog version is 4.0.3735.
#2
JaVa
#1
JaVa
I'm having this newbie problem with sending logs from Windows Server 2008 R2. I tried to search a solution from here and from the user guide but can't find a solution. I'm getting this error message to nxlog.log:
WARNING Module filein1 has no input files to read
My config is this:
<Extension multiline1>
Module xm_multiline
HeaderLine /^\d{4}\-\d{2}\-\d{2}\s\d{2}\:\d{2}\:\d{2}\,\d{3}\s\d+/
#escape lines with whitespaces
Exec if $raw_event =~ /^\s*$/ drop();
</Extension>
<Input filein1>
Module im_file
File "C:\Program Files (x86)\CA\Some Manager\Connector Server\jcs\logs\LDAP_DYN\jcs_conn"
InputType multiline1
SavePos TRUE
Exec $SourceName = 'SomeManager';
</Input>
<Output out>
Module om_tcp
Host 192.168.1.1
Port 1468
Exec to_syslog_ietf();
</Output>
<Route 1>
Path filein1 => out
</Route>
What am i missing here? NXLog version is 4.0.3735.
Found the problem. I had typed the path incorrectly.