Hello,

I am still very new with nxlog, and currently, I am very stuck. I need to configure nxlog to pick up application files (currently we are only receiving standard windows logs). For testing purposes, I have installed and configured nxlog on my test machine.

We are using extra.conf to avoid making changes in nxlog config itself, which we install on the server automatically.

Here is my configuration which works fine on my test machine, but on the real application server, it only produces an empty file. Can it be related to the server itself, or am I just missing something? Logs are not showing any error messages.

<Extension xmlparser> Module xm_xml </Extension>

<Extension multiline_1> Module xm_multiline HeaderLine /^<Message>/ EndLine /^</Message>/ </Extension>

<Input timmsg> Module im_file File 'C:\Users\Administrator\Desktop\msg.log' SavePos FALSE ReadFromLast FALSE InputType multiline_1 <Exec>

Parse the xml event

parse_xml();

  # Rewrite some fields 
$EventTime = parsedate($timestamp);
delete($timestamp);
delete($EventReceivedTime);

  # Convert to JSON
  to_json();
</Exec>

</Input>

Define the output that goes to LogPoint for analysis

<Output timout> Module om_file File "C:\Users\administrator\Desktop\1.txt" </Output>

Tie together inputs to outputs

<Route 2> Path timmsg => timout </Route>