Have installed nx onprem on ubuntu 22.04.5 LTS and cant login after the install finishes. Not sure how many pods are suppose to run but I see a postgress and vault 1c9df1fc6f5d  nxlogacr.azurecr.io/vault:1.13.3                                3 hours ago  Up 2 hours ago (healthy)              nxlog-1_2_2-vault-1eef5bec91376  nxlogacr.azurecr.io/postgres:16.3-alpine  -c config_file=/e...  3 hours ago  Up 2 hours ago (healthy)              nxlog-1_2_2-postgres-1 Below is what shows listening and I don't see any web services. dp    UNCONN  0       0                                      10.89.0.1:53          0.0.0.0:*      users:(("dnsmasq",pid=1291,fd=4))          udp    UNCONN  0       0                                  127.0.0.53%lo:53          0.0.0.0:*      users:(("systemd-resolve",pid=627,fd=13))  udp    UNCONN  0       0        [fe80::d433:a2ff:fe02:9e0d]%cni-podman1:53             [::]:*      users:(("dnsmasq",pid=1291,fd=10))         tcp    LISTEN  0       32                                     10.89.0.1:53          0.0.0.0:*      users:(("dnsmasq",pid=1291,fd=5))          tcp    LISTEN  0       4096                               127.0.0.53%lo:53          0.0.0.0:*      users:(("systemd-resolve",pid=627,fd=14))  tcp    LISTEN  0       128                                      0.0.0.0:22          0.0.0.0:*      users:(("sshd",pid=750,fd=3))              tcp    LISTEN  0       32       [fe80::d433:a2ff:fe02:9e0d]%cni-podman1:53             [::]:*      users:(("dnsmasq",pid=1291,fd=11))         tcp    LISTEN  0       128                                         [::]:22             [::]:*      users:(("sshd"I see the following error in nxp.logHA Mode                 standbyActive Node Address     <none>Raft Committed Index    31Raft Applied Index      31Error authenticating: error looking up token: Error making API request.URL: GET http://0.0.0.0:8200/v1/auth/token/lookup-selfCode: 500. Errors:I got the following during the install[2024-09-25 00:28:55] [INFO] Vault container ID: 62f8bd5e1e00[2024-09-25 00:28:55] [INFO] Executing command (/init/bootstrap.sh) in container 62f8bd5e1e00...make: *** [Makefile:231: seed-vault] Error 2

Hello,I'm attempting to install the NXLog Platform on-prem on a Ubuntu 24.04 LTS VM, but I am running into the following error on the nxlog-1_2_2-vault-1 container:fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/community/x86_64/APKINDEX.tar.gz WARNING: updating and opening https://dl-cdn.alpinelinux.org/alpine/v3.18/main: temporary error (try again later) WARNING: updating and opening https://dl-cdn.alpinelinux.org/alpine/v3.18/community: temporary error (try again later) ERROR: unable to select packages: supervisor (no such package): required by: world[supervisor] fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/main/x86_64/APKINDEX.tar.gz fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/community/x86_64/APKINDEX.tar.gz WARNING: updating and opening https://dl-cdn.alpinelinux.org/alpine/v3.18/main: temporary error (try again later) WARNING: updating and opening https://dl-cdn.alpinelinux.org/alpine/v3.18/community: temporary error (try again later) ERROR: unable to select packages: supervisor (no such package): required by: world[supervisor] fetch https://dl-cdn.alpinelinux.org/alpine/v3.18/main/x86_64/APKINDEX.tar.gz When accessing this link from my host machine, I am able to download the .tar.gz, so it does not seem to be a network issue. Additionally, from the VM I am able to reach the internet perfectly fine to, e.g., run updates and I can cURL the URL from the VM as well.Any assistance on this would be appreciated!Thanks

Hi, seems there is a bug in im_msvistalog module in nxlog-ce-3.0.2272 for Windows. After service has generated some output, stopping service sometimes give the message box "Broken pipe" and sometimes Nxlog write a malformed configcache.dat and following the start posts an ERROR failed to restore the saved position from bookmark xml (error:15008)" Tested on Windows 2012 R2 and Windows 2019 <Output out> Module om_file File '%LOGDIR%\Output' </Output> <Input _im_eventlog> Module im_msvistalog SavePos TRUE <QueryXML> <QueryList> <Query Id='1'> <Select Path='Security'>*</Select> </Query> </QueryList> </QueryXML> # Query <QueryList>\ # <Query Id='0'>\ # <Select Path="Security">*</Select>\ # </Query>\ # </QueryList> </Input> #<Output outNull> # Module om_null #</Output> <Route RouteA> Path _im_eventlog => out </Route> This issue make the module not worth to use because not saving the bookmark of the processed registry record, force it to generate same logs from start over each service restart. Best.

HiHere is my configuration. However, only Sysmon events are not working because they contain "/operational: " at the beginning of the message, which causes the events to be parsed incorrectlySo I want to know how to remove "/operational:  "<Extension syslog>   Module          xm_syslog</Extension><Input in>   Module          im_msvistalog   ReadFromLast True    <QueryXML>            <QueryList>  <Query Id="0">   <Select Path="Application">*</Select>   <Select Path="System">*</Select>   <Select Path="Security">*</Select>   <Select Path="Windows PowerShell">*</Select>   <Select Path="Microsoft-Windows-Sysmon/Operational">*</Select>  </Query> </QueryList> </QueryXML>   Exec          $UnixTime = integer($EventTime)/1000; </Input><Output devo_relay> Module        om_tcp Host          192.168.29.133Port          13000 I tried Exec if ($SourceName =~ /Microsoft-Windows-Sysmon\/Operational/) { $Message = replace($Message, "/operational: ", ""); }and Exec    if ($Message =~ /\/operational: /) {                     $Message = replace($Message, "/operational: ", "");                 }But all did not work

I'm successfully using this config format with im_file to read logs with todays date in the filename:'\\server.domain\Logs\IN' + strftime(now(), "%y%m%d") + '.log'One of our services writes its log for the previous day at 3am on the next day. The filename has yesterdays date. What's the easiest/neatest/most efficient way of reading this log please?

Hi folks,We have an NXLog CE 3.2.2329 configuration using im_tcp with InputType LineBased, receiving blobs of JSON separated by newlines. The received data is passed to xm_perl and then relayed to an output.Under some conditions where there may be thousands of events per second, there is a very rare chance for one event to be truncated at the end yielding an incomplete json blob.  We've verified that the input data coming from upstream is valid, fully formed JSON - the emitter encoding logs look OK. The preceeding and following lines are also received and parsed successfully. Has anybody else experienced similar behavior? At this point we suspect a bug in NXLog, considering that it occurs very infrequently (2-3 days between recurrences) and it only occurs during periods of relatively high load (normal load is ~150 events per second, load when issue occurs is ~800/s+)Relevant configuration: <Extension gelf>Module      xm_gelf</Extension><Extension perl>Module      xm_perlPerlCode    /etc/nxlog/scripts/parse_mist.pl</Extension><Input mist_tcp>Module      im_tcpHost        0.0.0.0Port        32768InputType   LineBased<Exec>perl_call("parse_mist");if $nxlog_internal_drop_log drop();</Exec></Input><Output graylog>Module      om_udpHost        xPort        12201OutputType  GELF</Output><Route graylog>Path       mist_tcp => graylog</Route>

I've successfully installed the NXLog platform on Ubuntu 22.04.4 LTS, but I'm facing an issue with port 443 not being accessible. I’ve allowed port 443 through the firewall, but I still can't access the web console. I’ve checked the service status, and everything seems fine. Is there any configuration or additional steps I might have missed to get port 443 up and running?Any help would be appreciated. Thanks in advance!@Ayodele@2Emeka Nwankwo 

I have setup with RHEL 7.9 (kernel  3.10.0-1160.108.1.el7.x86_64) / NXLog CE 3.2.2329 / Postgresql 15 vanilla / libdbi 8.4 with configuration:User nxlog Group nxlog include /etc/nxlog/nxlog.d/*.conf LogFile /var/log/nxlog/nxlog.log LogLevel DEBUG <Extension charconv> Module xm_charconv </Extension> <Input sqlite3_dbi> Module im_dbi SQL SELECT * FROM vw_tp_message Driver sqlite3 Option dbname term_refdata.db Option sqlite3_dbdir /app/data/monitoring Option sqlite3_timeout 1000 PollInterval 5 SavePos TRUE </Input> <Output postgres_dbi> Module om_dbi SQL INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ($SyslogFacility, $SyslogSeverity, $Hostname, '$EventTime', $SourceName, $Message) Driver pgsql Option host /var/run/postgresql Option username srv_nxlog Option dbname MSGLog Exec $Message = convert($Message, "windows-1251", "utf-8"); </Output> <Route sqlite_postgres> Path sqlite3_dbi => postgres_dbi </Route>There are only 2 records in sqlite database:$ sqlite3 -header /app/data/monitoring/term_refdata.db 'select * from vw_tp_message' id|SyslogFacility|SyslogSeverity|Hostname|EventTime|SourceName|Message 1293441|USER|INFO|SERVER1-D1-CL|2024-09-12 00:18:22.540|tp_msg|Some text in Windows1251 encoding 1293442|USER|INFO|SERVER1-D1-CL|2024-09-12 00:41:04.677|tp_msg|Another text in Windows1251 encodingAnd this is what I get in nxlog.log:... 2024-09-12 16:54:59 DEBUG logdata missing or undef 'EventTime', setting to NULL 2024-09-12 16:54:59 DEBUG om_dbi SQL: INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 'tp_msg', 'Some text in Windows1251 encoding') 2024-09-12 16:54:59 ERROR [om_dbi.c:256/om_dbi_write()] -;[om_dbi.c:85/om_dbi_error()] om_dbi failed to execute SQL statement "INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 'tp_msg', 'Some text in Windows1251 encoding')". ERROR: invalid input syntax for type timestamp: "NULL";LINE 1: ... VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 't...; ^;[errorcode: 0] ... 2024-09-12 16:54:59 DEBUG logdata missing or undef 'EventTime', setting to NULL 2024-09-12 16:54:59 DEBUG om_dbi SQL: INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 'tp_msg', 'Р?нициализация СЏРґСЂР° после перезапуска') 2024-09-12 16:54:59 ERROR [om_dbi.c:256/om_dbi_write()] -;[om_dbi.c:85/om_dbi_error()] om_dbi failed to execute SQL statement "INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 'tp_msg', 'Р?нициализация СЏРґСЂР° после перезапуска')". ERROR: invalid input syntax for type timestamp: "NULL";LINE 1: ... VALUES ('USER', 'INFO', 'ABACUS-D1-CL', 'NULL', 't...; ^;[errorcode: 0] ... 2024-09-12 16:54:59 ERROR [expr.c:189/nx_expr_statement_execute()] assignment failed at line 61, character 70 in /etc/nxlog/nxlog.conf. statement execution has been aborted;[expr.c:90/nx_expr_statement_assignment_execute()] -;[expr.c:509/nx_expr_evaluate()] function 'convert' failed at line 61, character 69 in /etc/nxlog/nxlog.conf. expression evaluation has been aborted;[expr.c:279/nx_expr_eval_func()] -;[xm_charconv_funcproc_cb.c:283/nx_expr_func__convert()] -;[str.c:106/_nx_string_new_size()] oversized string (1688710), limit is 1048576 bytes 2024-09-12 16:54:59 DEBUG logdata missing or undef 'EventTime', setting to NULL 2024-09-12 16:54:59 DEBUG om_dbi SQL: INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 'tp_msg', 'Р В Р’В РВ<C2> 2024-09-12 16:54:59 ERROR [om_dbi.c:256/om_dbi_write()] -;[om_dbi.c:85/om_dbi_error()] om_dbi failed to execute SQL statement "INSERT INTO msglog.msglog (facility, severity, hostname, timestamp, application, message) VALUES ('USER', 'INFO', 'SERVER1-D1-CL', 'NULL', 'tp_msg', 'Р В Р’ВРР<E2><80> ...As you can see, logdata variable $EventTime just disappear and $Message get corrupted after some retries (note: om_dbi retries crazy fast - about 50000 time every few seconds). If I change om_dbi to simple om_file then all works fine. Another note: this configuration worked fine some time since initial setup, but now error appear every time (maybe postgresql query time affects it?)  

Please give me some advice. When I used nxlog to receive DHCP server logs, I found that the logs were missing and the nxlog logs showed error messages. INFO inode changed for 'E:\DHCP\DhcpSrvLog-Fri.log' (56→56): reopening possibly rotated file  

We currently have NXLog running on Windows 2019 with the file integrity module that monitors files in sub directories under a main directly.  I.E.  Say we have about 20 subdirectories for files under a directory called c:\code. If any file is changed/deleted/added under that directory, an alert message is sent out via the OM_UDP module to our siem. The problem I am looking to resolve, is that I will be copying over about 10 new directories with hundreds of files in each directory, and I don't want NXLog to generate hundreds of alerts because it found new files and directories.  Is there a way to “reset” or “refresh” the baseline after the new files/folders are copied over so it will know those files should be there?

Is there any ETA on Debian 12 support for NXLog Community Edition?

I havent been able to download the files for any of the community edition agents. https://nxlog.co/downloads/nxlog-ce#nxlog-community-edition , select the OS version and click Download.  5 sec later I get a pop up stating “Undefined”.  I have tried on different Browsers, platforms, and workstations and there is no change in the behavior.

Hi,Could you please advise on how to replace the NXLog-Manager's self-signed certificate for the HTTPS console?The steps in the following article do not apply to version 5.7.5:https://docs.nxlog.co/manager/current/installation/https.htmlPlease help. Thanks.Regards, Billy

I'm trying to integrate with LDAPS and do have some issue. I'm using the below document and below is the command to import LDAPS certificate into the cacerts keystore. keytool -keystore <PATH_TO_JRE>/lib/security/cacerts -import -alias \ certificate -file <PATH_TO_CERTIFICATE>/certificate.cerWhen i try to import the certificate and they are asking for the keystore password. I assume this keystore was created during installation not sure what is the password.Need to check whether anyone know what is the keystore password?https://docs.nxlog.co/manager/current/users/index.html

Greetings! I have a vulnerability in jQuery to be addressed in the nxlog manager v5 (5.5.5398). This is related to XSS vulnerabilities from the version of jQuery installed (1.8.3, 1.9.2 ui) . Will upgrading Manager to 5.6.5633 resolve the issue and update jQuery to 3.5.0+ ? If not, please can you provide steps to update jQuery manually? Thanks! Shyam (on behalf of Shashidhar Ghiliyal)

Hi,sorry, just added config an logs….We have some installations of NXLOG in Version 3.2.2339. This works fine, but every 5 to 10 minutes we find exactly 50 events showing a crash of nxlog.exe in module im_msvistalog.Problem signature: P1: nxlog.exe P2: 0.0.0.0 P3: 643951bd P4: im_msvistalog.dll P5: 0.0.0.0 P6: 643951bd P7: c0000005 P8: 00000000000045b2 P9: P10:  Any suggestions how to fix that?Thanks & Best regards, Thilo nxlog.cfg:define ROOT C:\Program Files\nxlog define CERTDIR %ROOT%\cert define CONFDIR %ROOT%\conf define LOGDIR %ROOT%\data define LOGFILE %LOGDIR%\nxlog.log LogFile %LOGFILE% Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data <Extension gelf> Module xm_gelf </Extension> <Input eventlog> Module im_msvistalog Query <QueryList> <Query Id="0"> <Select Path="Application"></Select> <Select Path="System"></Select> <Select Path="Security"></Select> <Select Path="Microsoft-Windows-Windows Defender/Operational"></Select> </Query> </QueryList> </Input> <Output tcp> Module om_tcp Host graylog.xxxx.yyyy Port 12202 OutputType GELF_TCP Exec $Hostname = 'hostXYZ.xxxx.yyyy'; </Output> <Route eventlog_to_udp> Path eventlog => tcp </Route>Crash-Event:Debug-Log atTime of Event (19:46:37)2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa201b610 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b840 2024-02-14 19:46:37 DEBUG worker 1 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d49f0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 got signal for new job 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d48b0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG worker 1 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b7a0 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 got signal for new job 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d47c0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b890 2024-02-14 19:46:37 DEBUG worker 1 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d49a0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 got signal for new job 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d47c0 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 1 waiting for new event 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d4a40 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG new event in event_thread [eventlog:READ] 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: READ (eventlog) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG no events or no future events, event thread sleeping in condwait 2024-02-14 19:46:37 DEBUG worker 1 got signal for new job 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa201b570 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: READ (eventlog) 2024-02-14 19:46:37 DEBUG im_msvistalog checking for new events... 2024-02-14 19:46:37 DEBUG im_msvistalog read 21 events 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] apr_pollset_poll was interrupted 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4a90 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b840 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b7a0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1449 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b7f0 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4770 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4900 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b7a0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4810 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 1 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 2 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4860 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b610 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b660 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4950 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b610 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] apr_pollset_poll was interrupted 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d47c0 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4900 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1479 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1292 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4810 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b700 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1883 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b840 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d49f0 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1843 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d47c0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b7a0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 2011 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d4770 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 2019 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b660 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d4900 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1769 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b890 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d4a90 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1800 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d48b0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b5c0 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d4a40 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG [tcp] apr_pollset_poll was interrupted 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d49a0 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 1 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp sent 8161 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 2 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 1843 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b610 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d4950 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG om_tcp sent 2025 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d47c0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b840 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa201b610 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG before nx_logqueue_push, size: 0 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] apr_pollset_poll was interrupted 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d03f0 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa201b750 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got (queuesize: 0) 2024-02-14 19:46:37 DEBUG RESUME: eventlog 2024-02-14 19:46:37 DEBUG new event in event_thread [eventlog:READ] 2024-02-14 19:46:37 DEBUG module eventlog already running, skipping resume 2024-02-14 19:46:37 DEBUG future event, event thread sleeping 1000000ms in cond_timedwait 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG executing statements 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d0580 2024-02-14 19:46:37 DEBUG evaluating expression 'string literal' at C:\Program Files\nxlog\conf\nxlog.conf:34 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG worker 0 got no event to process 2024-02-14 19:46:37 DEBUG RESUME: eventlog 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG module eventlog already running, skipping resume 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG om_tcp sent 1985 bytes 2024-02-14 19:46:37 DEBUG before nx_logqueue_pop, size: 1 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d04e0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG RESUME: eventlog 2024-02-14 19:46:37 DEBUG module eventlog already running, skipping resume 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa201b7f0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG found other events (1), adding poll event to end of list 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d0490 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: DATA_AVAILABLE (tcp) 2024-02-14 19:46:37 DEBUG om_tcp_write 2024-02-14 19:46:37 DEBUG add socket [21] 2024-02-14 19:46:37 DEBUG socket already added to pollset with reqevents [21 != 21] 2024-02-14 19:46:37 DEBUG tcp get_next_logdata: got NULL (queuesize: 0) 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 got signal for new job 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d0580 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d0530 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: MODULE_RESUME (eventlog) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG RESUME: eventlog 2024-02-14 19:46:37 DEBUG module eventlog already running, skipping resume 2024-02-14 19:46:37 DEBUG worker 1 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 0 processing event 0xa23d03f0 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 got no event to process 2024-02-14 19:46:37 DEBUG worker 2 waiting for new event 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 1 got signal for new job 2024-02-14 19:46:37 DEBUG worker 1 processing event 0xa23d0490 2024-02-14 19:46:37 DEBUG worker 0 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp 2024-02-14 19:46:37 DEBUG [tcp] no poll events, pollset_poll timed out 2024-02-14 19:46:37 DEBUG nx_event_to_jobqueue: POLL (tcp) 2024-02-14 19:46:37 DEBUG event added to jobqueue 2024-02-14 19:46:37 DEBUG worker 2 got signal for new job 2024-02-14 19:46:37 DEBUG worker 2 processing event 0xa23d04e0 2024-02-14 19:46:37 DEBUG worker 1 waiting for new event 2024-02-14 19:46:37 DEBUG PROCESS_EVENT: POLL (tcp) 2024-02-14 19:46:37 DEBUG nx_module_pollset_poll: tcp    

Hello! I need to process input syslog events via tls. But in the nxlog.log I have the following errors: 2020-02-18 16:19:01 INFO SSL connection accepted from XX.XX.XX.XX:52616 2020-02-18 16:19:01 ERROR SSL error, SSL_ERROR_SSL: retval 0, reason: sslv3 alert certificate unknown 2020-02-18 16:19:01 WARNING SSL connection closed from XX.XX.XX.XX:52616 When I try to DEBUG I've got the following events: 2020-02-18 16:27:54 DEBUG worker 0 got signal for new job 2020-02-18 16:27:54 DEBUG worker 0 got no event to process 2020-02-18 16:27:54 DEBUG worker 0 waiting for new event 2020-02-18 16:27:54 DEBUG no events or no future events, event thread sleeping in condwait 2020-02-18 16:27:54 DEBUG [in_syslog_tcp_ssl] no poll events, pollset_poll timed out 2020-02-18 16:27:54 DEBUG nx_event_to_jobqueue: POLL (in_syslog_tcp_ssl) 2020-02-18 16:27:54 DEBUG event added to jobqueue 2020-02-18 16:27:54 DEBUG worker 2 processing event 0x7f0d140008c0 2020-02-18 16:27:54 DEBUG PROCESS_EVENT: POLL (in_syslog_tcp_ssl) 2020-02-18 16:27:54 DEBUG nx_module_pollset_poll: in_syslog_tcp_ssl 2020-02-18 16:27:54 DEBUG worker 1 got signal for new job 2020-02-18 16:27:54 DEBUG worker 1 got no event to process 2020-02-18 16:27:54 DEBUG worker 1 waiting for new event 2020-02-18 16:27:54 DEBUG no events or no future events, event thread sleeping in condwait 2020-02-18 16:27:54 DEBUG [in_syslog_tcp_ssl] no poll events, pollset_poll timed out 2020-02-18 16:27:54 DEBUG nx_event_to_jobqueue: POLL (in_syslog_tcp_ssl) 2020-02-18 16:27:54 DEBUG event added to jobqueue 2020-02-18 16:27:54 DEBUG worker 2 processing event 0x7f0d14000910 2020-02-18 16:27:54 DEBUG PROCESS_EVENT: POLL (in_syslog_tcp_ssl) 2020-02-18 16:27:54 DEBUG nx_module_pollset_poll: in_syslog_tcp_ssl 2020-02-18 16:27:54 DEBUG worker 3 got signal for new job 2020-02-18 16:27:54 DEBUG worker 3 got no event to process 2020-02-18 16:27:54 DEBUG worker 3 waiting for new event 2020-02-18 16:27:54 DEBUG no events or no future events, event thread sleeping in condwait My input configuration: <Input in_syslog_tcp_ssl> Module im_ssl Host 0.0.0.0 Port 12514 CAFile /opt/nxlog/ssl/rootCA.pem AllowUntrusted TRUE RequireCert FALSE CertFile /opt/nxlog/ssl/server.crt CertKeyFile /opt/nxlog/ssl/server.key InputType Syslog_TLS KeyPass XXXXXXXXXX Exec parse_syslog(); </Input> I create certificates by this guide: https://nxlog.co/documentation/nxlog-user-guide/encrypted.html#openssl-certs I trying to use different variation with "AllowUntrusted", "RequireCert", but it's not working for me.

Greetings All,I'm attempting to collect logs from a Meditech server and having a bit of an issue getting the conf file working. Nxlog.log does not show an error but the conf is not writing to the output file.. Typical log that will need to be parsed looks something like this(There is inconsistent spacing in the log):[2024-06-020T04:03:52.593Z maintenance 3 10152 - - Info] Beginning maintenance cycle...And I'm attempting to parse and send it to a file with this:# # Configuration for converting and sending MediTech Logs # #Configure Root Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log #Load Modules <Extension json> Module xm_json </Extension> <Extension syslog> Module xm_syslog </Extension> <Input internal> Module im_internal </Input> ####################################################################### MediTech ####################################################################### Define the input source: MediTech logs <Input MEDITECH_IN> Module im_file File "C:\MediTech\s1.log" &lt;Exec&gt; if $raw_event =~ /(\S+)\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)\s+(\S+)\]\s+(.*)$/ { $raw_event = "Time: " + $EventTime + "," + "C1: " + $2 + "," + "C2: " + $3 + "," + "C3: " + $4 + "," + "C4: " + $5 + "," + "C5: " + $6 + "," + "C6: " + $7; } &lt;/Exec&gt; </Input> Define the output destination: forwarding to a central syslog server <Output MEDITECH_OUT> Module om_file File "C:\MediTech\s1_exec_out.txt" Exec $Message = $raw_event; </Output> <Route MEDITECH> Path MEDITECH_IN => MEDITECH_OUT </Route>Also, if I'm way off base with the parsing method please let me know.Any assistance would be appreciated.

I'm attempting to parse a Cerberus FTP log file. What I wind up with:{ "EventReceivedTime": "2024-08-01 16:11:37", "SourceModuleName": "cerberus_log", "SourceModuleType": "im_file", "message": "[\u00002\u00000\u00002\u00004\u0000-\u00000\u00008\u0000-\u00000\u00001\u0000 \u00001\u00006\u0000:\u00001\u00001\u0000:\u00003\u00006\u0000]\u0000:\u0000C\u0000O\u0000N\u0000N\u0000E\u0000C\u0000T\u0000 \u0000[\u00001\u00005\u00002\u00004\u00009\u00002\u0000]\u0000 \u0000-\u0000 \u0000C\u0000o\u0000n\u0000n\u0000e\u0000c\u0000t\u0000i\u0000o\u0000n\u0000 \u0000t\u0000e\u0000r\u0000m\u0000i\u0000n\u0000a\u0000t\u0000e\u0000d\u0000" }I've tried this, to no avail:<Input cerberus_log> Module im_file File "C:\ProgramData\Cerberus LLC\Cerberus FTP Server\log\server.1.log" <Exec> $message = convert($raw_event, "utf-8", "iso8859-2"); if $message =~ s/(.)\\u0000// $message = $1; to_json(); </Exec> </Input>How can I properly parse the log to remove the \u0000 characters before it goes out?

We have a distributed solution and a centralised solutionBoth send events to Splunk (I'm the Splunk Admin)100% of the distributed events have the host field present.About 50% of the centralised events have the host field missing and show :Hostname: ?Any idea why this would be? is this a misconfiguration on the centralised host somewhere?  or on the agentless side?Module:SourceModuleName: in_audit_pipe   SourceModuleType: im_pipeThanks.