Hi guys,


I need help about NXlog with graylog, on my 2008 server my nxlog send correctly log to my graylog server but i cant see lvl and facility off all logs :-(. like :

facility : Unknown and level Invalid [-1]

plz see my nxlog config :

 <Extension gelf>
Module xm_gelf
 <Extension syslog>
    Module    xm_syslog

<Input eventlog>
Module im_msvistalog
# this kinda works for me, put * to get everything
Query <QueryList>\
<Query Id="0">\
<Select Path='Application'>*[Application/Level=2][Application/Level=3][Application/Level=1]</Select>\
<Select Path='System'>*[system/Level=2][system/Level=3][system/Level=1]</Select>\
<Select Path='Security'>*</Select>\
<Select Path='Setup'>*</Select>\

<Output out>
    Module      om_udp
    Port           9000

<Route 1>
    Path        eventlog => out


btw i tried to use GELF out type but all messages in graylog was ���������������

hope u will help me




AskedJune 10, 2015 - 4:39pm

Answer (1)

See the example in the NXLog Reference Manual. You need the following:

OutputType  GELF_UDP

Comments (3)

  • adm's picture

    Perhaps you need to configure the graylog side to be expecting GELF.  Please ask the graylog folks about that.

    I'm pretty sure that's a configuration issue at your end since this works well with graylog for many users.