Hi All, I want to write windows events to a new file every 1 min. As of now, I have the following Output block in my conf which works. It is given below,
<Output file> Module om_file File "C:\\Program Files (x86)\\nxlog\\data\\nxlog-output.json" <Schedule> Every 1 min Exec rotate_to(file_name() + strftime(now(), '_%Y-%m-%d_%H-%M-%S')); </Schedule> </Output>
But in this case, I always write to the same file i.e "C:\Program Files (x86)\nxlog\data\nxlog-output.json" and after 1 min, the data is saved in other file with naming convention mentioned above. I want to create a new file every 1 min with above naming convention and then write to that file instead of writing to the same file.
**How can I do this? Admins please guide. **