Skip to content

Instantly share code, notes, and snippets.

@dvas0004
Last active August 29, 2015 14:23
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dvas0004/12440fef37b7465ad34d to your computer and use it in GitHub Desktop.
Save dvas0004/12440fef37b7465ad34d to your computer and use it in GitHub Desktop.
NXLog manual, on-demand OSSIM configuration
Global directives #
########################################
User nxlog
Group nxlog
LogFile /var/log/nxlog/nxlog.log
LogLevel INFO
########################################
# Modules #
########################################
<Extension _syslog>
Module xm_syslog
</Extension>
<Extension json>
Module xm_json
</Extension>
<Input in_ossim>
Module im_file
File '/elk/historic_data/ossim/*.log'
SavePos TRUE
ReadFromLast FALSE
PollInterval 1
Exec $message = $raw_event;
</Input>
<Output out_ossim>
Module om_tcp
Port 5142
Host 127.0.0.1
</Output>
<Route 1>
Path in_ossim => out_ossim
</Route>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment