0
responses

Hello everyone, I find myself configuring NXLog EE 5 with the batchcompress modules, but it does not connect the client with the server.

My client configuration is:

define ROOT C:\Program Files\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

#Lectura de los registros de auditoria
<Input eventlog>
Module im_msvistalog
<QueryXML>
<QueryList>
<Query Id='0'>
<Select Path='Application'>*</Select>
<Select Path='Security'>*[System/Level&lt;4]</Select>
<Select Path='System'>*</Select>
</Query>
</QueryList>
</QueryXML>
</Input>

<Output out_batch>
Module om_batchcompress
Host 192.168.1.11
Port 2514
</Output>

#Envio de los datos de la entrada a la salida
<Route route_Pattern>
Path eventlog => out_batch
</Route>

And the following error is: "couldn't connect to 10.0.200.11:2514; A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond."

My server configuration is:

define ROOT C:\Program Files\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

#Extensiones de los logs
<Extension json>
Module xm_json
</Extension>

#Lectura de los registros de cliente
<Input in_batch>
Module im_batchcompress
ListenAddr 0.0.0.0:2514
</Input>

#Salida de las lecturas realizadas mediante UDP y en formato JSON
<Output udp>
Module om_udp
Host 192.168.2.6:514
Exec to_json();
</Output>

#Envio de los datos de la entrada a la salida
<Route route_Pattern>
Path in_batch => udp
</Route>

And if I get the message of listening on port 2514

Can you help me to determine what I am missing in my configuration, I appreciate your help.

AskedJuly 31, 2022 - 11:06pm

Answers (0)