Nxlog taking MC Afee event and send it to another monitoring server

#1 Maxime.Tremblay 5 years ago

Hi, i have an NXLOG server installed and i want it to take the antivirus event to another monitoring server. Do you know wich command i had to enter to take this log and push it to another server ?

Permalink

#2 Zhengshi Nxlog ✓ 5 years ago

#1 Maxime.Tremblay

Hi, i have an NXLOG server installed and i want it to take the antivirus event to another monitoring server. Do you know wich command i had to enter to take this log and push it to another server ?

This is going to be very dependent on your environment. The basics are you are going to need an Input, and Output and a Route.
Input will read wherever your source log is coming from. (antivirus event in your case)
Output will be however you need to send to your monitoring server. (tcp, udp, http, etc)

I suggest giving the following section a read through. The manual has a lot of good information in it to help you configure various setups.
https://nxlog.co/documentation/nxlog-user-guide#config_overview