Differences between nxlog and windows sysmon event log?

I want to send the window event log generated from the normal PC to the graylog.

My first plan was to install sysmon and send it to graylog, but I had difficulty with the transport part

So I got to know nxlog.

I need the Windows event log from sysmon, which is the Windows security log. Can I check this in nxlog?

Thank you for your guide.

And I want to know the difference between nxlog and sysmon log

AskedJanuary 31, 2019 - 1:30am


Curious if IPv6 is supported yet? If not, is there an ETA on when it will be supported?

AskedJanuary 30, 2019 - 10:10pm

File Rotate Directory

I am attempting to use xm_ifileop to rotate some logfiles I am collecting with nxlog. I can see that rotation works as expected if I specify the file path but can I use the same logic to rotate all files in directory.

AskedJanuary 30, 2019 - 7:43pm

NXLog postgresql ID manipulation?

Is it possible to manipulate the ID in SQL queries done by NXLog agent? The documentation states this in im_dbi module:

The module automatically appends a WHERE id > ? LIMIT 10 clause to the statement. The result set returned by the SELECT statement must contain an id column which is then stored and used for the next query.

AskedJanuary 29, 2019 - 9:30am