139.22. Microsoft Network Policy Server (xm_nps)

Table of Contents

This module provides functions and procedures for processing data in the Network Policy Server (NPS) format. NPS is Microsoft’s implementation of a RADIUS server and proxy, and is formerly known as Internet Authentication Service (IAS). This module is capable of parsing both IAS and NPS-formatted data.

Note	To examine the supported platforms, see the list of installer packages in the Available Modules chapter.

NPS-formatted data typically resembles the sample below.

NPS-formatted data

"RasBox","RAS",10/22/2006,09:13:09,1,"DOMAIN\user","DOMAIN\user",,,,,,"192.168.132.45",12,,"192.168.132.45",,,,0,"CONNECT 24000",1,2,4,,0,"311 1 192.168.132.45 07/31/2006 21:35:14 749",,,,,,,,,,,,,,,,,,,,,,,,,,,,"MSRASV5.00",311,,,,
"RasBox","RAS",10/22/2006,09:13:09,3,,"DOMAIN\user",,,,,,,,,,,,,,,,,4,,36,"311 1 192.168.132.45 07/31/2006 21:35:14 749",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"0x00453D36393120523D3020563D33",,,
"RasBox","RAS",10/22/2006,09:13:13,1,"DOMAIN\user","DOMAIN\user",,,,,,"192.168.132.45",12,,"192.168.132.45",,,,0,"CONNECT 24000",1,2,4,,0,"311 1 192.168.132.45 07/31/2006 21:35:14 750",,,,,,,,,,,,,,,,,,,,,,,,,,,,"MSRASV5.00",311,,,,

For more information about the Microsoft NPS format, see the Interpret NPS Database Format Log Files article on Microsoft TechNet.

139.22.1. Configuration

The xm_nps module accepts only the common module directives.

139.22.2. Procedures

The following procedures are exported by xm_nps.

parse_nps();: Parse the $raw_event field as NPS input.
parse_nps(string source);: Parse the given string as NPS format.

139.22.3. Examples

Example 720. Parsing NPS data

The following configuration reads NPS-formatted files and converts the parsed data into JSON.

nxlog.conf


  1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

  <Extension nps>
    Module      xm_nps
</Extension>

<Extension json>
    Module      xm_json
</Extension>

<Input filein>
    Module      im_file
    File        'C:\logs\IAS.log'
    Exec        parse_nps();
</Input>

<Output fileout>
    Module      om_file
    File        'C:\out.json'
    Exec        to_json();
</Output>

<Route nps_to_json>
    Path        filein => fileout
</Route>

You are here

139.22. Microsoft Network Policy Server (xm_nps) | Log Collection Solutions