Skip to content

Instantly share code, notes, and snippets.

Created November 7, 2014 14:13
Show Gist options
  • Save anonymous/ecede2a386a5453e4ed4 to your computer and use it in GitHub Desktop.
Save anonymous/ecede2a386a5453e4ed4 to your computer and use it in GitHub Desktop.
nxlog windows eventlog ssl
## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.
#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
<Extension json>
Module xm_json
</Extension>
# Nxlog internal logs
<Input internal>
Module im_internal
Exec $EventReceivedTime = integer($EventReceivedTime) / 1000000; to_json();
</Input>
# Windows Event Log
<Input eventlog>
# Uncomment im_msvistalog for Windows Vista/2008 and later
Module im_msvistalog
Query <QueryList>\
<Query Id="0">\
<Select Path="Application">*</Select>\
<Select Path="System">*</Select>\
<Select Path="Setup">*</Select>\
</Query>\
</QueryList>
# Uncomment im_mseventlog for Windows XP/2000/2003
# Module im_mseventlog
Exec $EventReceivedTime = integer($EventReceivedTime) / 1000000; to_json();
</Input>
<Output sslout>
Module om_ssl
Host 192.168.1.210
Port 1515
CertFile %CERTDIR%/server.csr
AllowUntrusted TRUE
OutputType LineBased
</Output>
<Route 1>
Path internal, eventlog => sslout
</Route>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment