Palo Alto Cortex Data Lake to Arcsight

We need to send Cortex Data Lake logs (IETF) to Arcsight (CEF). Will I be able to set up NXLog to do this conversion for me?

AskedAugust 19, 2020 - 4:30pm

Get NXLog to use a random port for each connection

Hi All,

I wonder if someone can answer this for me.

According to the documentation, it states that for a UDP client, the localport will be a random high port as per https://nxlog.co/documentation/nxlog-user-guide/om_udp.html

I have a situation where I am sending Zeek logs via UDP through a Google Seesaw load balancer see https://github.com/google/seesaw

AskedAugust 18, 2020 - 6:08pm

nxlog stopped working

2020-08-17 16:31:18 INFO nxlog-ce-2.10.2150 started
2020-08-17 16:31:18 ERROR couldn't connect to udp socket on; A socket operation was attempted to an unreachable network.

why I am getting this error?How can I solve this?

NXLog-CE version- 2.10.2150

AskedAugust 18, 2020 - 3:20pm

Oracle for Windows

we provide a SIEM solution for our customers, using AlienVault USM appliance and we are trying to implement/test NXlog for their servers. Has anyone implemented Oracle monitoring on Windows platform in NXlog and could share his experience? Don't seem to find any documentation for it.
Many thanks in advance

AskedAugust 14, 2020 - 5:54pm

Internet Explorer Logs Appear to have been deleted after installing nxlog

Internet Explorer Logs Appear to have been deleted after installing nxlog. We received an alert shortly after installing nxlog on our server. After digging, they appear to be temporary log files. We have a very basic configuration with no purging explicitly defined. Is this normal behaviour?

AskedAugust 14, 2020 - 5:20pm