sample nxlog configuration file for windows server (post 2003)

nxlog_windows.conf

## This is a sample configuration file. See the nxlog reference manual about the
## configuration options. It should be installed locally and is also available
## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html

## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.

#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

<Extension _syslog>
    Module      xm_syslog
</Extension>

<Extension json>
    Module	xm_json
</Extension>	

<Input in>
    Module      im_msvistalog
	Exec 	to_json();
	Query	<QueryList>\
                    	<Query Id="0">\
                       		<Select Path="Microsoft-Windows-TaskScheduler/Operational">*</Select>\
                	</Query>\
						<Query Id="1">\
                       		<Select Path="Application">*</Select>\
                	</Query>\
						<Query Id="2">\
                       		<Select Path="Security">*</Select>\
                	</Query>\
						<Query Id="3">\
                       		<Select Path="System">*</Select>\
                	</Query>\
		</QueryList>
</Input>

<Input DNS_LOGS>
    Module im_file
    File	"C:\\DNSLogs\dns.txt"'
    InputType LineBased
    Exec $Message = $raw_event;
    Exec to_json();
    SavePos TRUE
</Input>

<Output out>
    Module om_tcp
	Port 5140
	Host 192.168.10.175
</Output>

<Output out_debug>
    Module	om_file
    File	"C:\\nxlog_debug.log"
</Output>

<Route 1>
    Path        in => out
</Route>

<Route 2>
    #Path        DNS_LOGS => out_debug
    Path        DNS_LOGS => out
</Route>