I am trying to send an event related to terminal server logins to a logstash instance. When the message associated with the event contains an IPv4 address it works without issue. When the source network address in the message is IPv6 (containing a percent symbol), nxlog fails to parse the message with the error "ERROR_EVT_UNRESOLVED true". I have tried doing a replace of the % but it hasn't had and effect. Thanks!

AskedAugust 15, 2018 - 2:37pm

Comments (1)

  • Zhengshi's picture

    What version of nxlog are you using? What OS version is this running on?
    Could you post your config here? (sanitized as needed is fine, of course)

Answers (0)