Logs buffer when Graylog is offline - Page 1

#1 marcoz90 5 years ago

Hi all, searching on internet I found that by defaukt nxlog has a buffer of 65000 bytes, but it seems it's not working in my environment.

I'm using nxlog CE 2.10 (in a Windows 2012 environment) and Graylog 2.5.1 In my nxlog conf file I have 2 inputs (im_msvistalog, im_file) and 1 output (om_udp). I tried to stop the input in Graylog and start it after 1 hour, but logs collected by event viewer during that our were not sent to Graylog.

How can I configure nxlog in order to keep logs in memory while Graylog is offline and send them when Graylog comes back online?

Thank you, Marco.

Permalink

#2 marcoz90 5 years ago

#1 marcoz90

Hi all, searching on internet I found that by defaukt nxlog has a buffer of 65000 bytes, but it seems it's not working in my environment. I'm using nxlog CE 2.10 (in a Windows 2012 environment) and Graylog 2.5.1 In my nxlog conf file I have 2 inputs (im_msvistalog, im_file) and 1 output (om_udp). I tried to stop the input in Graylog and start it after 1 hour, but logs collected by event viewer during that our were not sent to Graylog. How can I configure nxlog in order to keep logs in memory while Graylog is offline and send them when Graylog comes back online? Thank you, Marco.

Hello, could you please let me know?

Thank you, Marco.