Hi
I faced this issue as well today and solved this way, hope this helps others
Cheers Chris
#------------------------------------------------ nxlog.conf -----------------------------------------
define ROOT C:\Program Files (x86)\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
<Extension gelf>
Module xm_gelf
</Extension>
<Input in_app>
Module im_msvistalog
Query <QueryList><Query Id="0"><Select Path="Application">*</Select></Query></QueryList>
Exec $Hostname = hostname();
</Input>
<Input in_sys>
Module im_msvistalog
Query <QueryList><Query Id="0"><Select Path="System">*</Select></Query></QueryList>
Exec $Hostname = hostname();
</Input>
<Input in_sec>
Module im_msvistalog
Query <QueryList><Query Id="0"><Select Path="Security">*</Select></Query></QueryList>
Exec $Hostname = hostname();
</Input>
<Output out>
Module om_udp
Host syslog.domain.local
Port 2016
OutputType GELF
</Output>
<Route oute_app>
Path in_app => out
</Route>
<Route oute_sys>
Path in_sys => out
</Route>
<Route oute_sec>
Path in_sec => out
</Route>
# ------------------------------------------------------------------------------------------------------