3
responses

Hi All,

Is there a better solution to capturing IIS logs across multiple sites on a single server than adding an input per site in nxlog.conf?

Thanks,

Matt.

AskedDecember 11, 2019 - 1:31pm

Comments (1)

  • manuel.munoz's picture
    (NXLog)

    You just need one input module in your collector's config file in order to receive logs from multiple source servers/devices. This is an example:

    <Input ssl>
       Module im_ssl
       Host localhost
       Port 23456
       CAFile %CERTDIR%/ca.pem
       CertFile %CERTDIR%/client-cert.pem 
       CertKeyFile %CERTDIR%/client-key.pem
       KeyPass secret
       InputType Binary
    </Input>
    

    Then you can install nxlog in each IIS server and push logs using om_ssl in each one of them.

    <Output ssl>
      Module om_ssl
      Host localhost
      Port 23456
      CAFile %CERTDIR%/ca.pem
      CertFile %CERTDIR%/client-cert.pem
      CertKeyFile %CERTDIR%/client-key.pem
      KeyPass secret
      AllowUntrusted TRUE
      OutputType Binary
    </Output>
    

Answer (1)