NXLog AlienVault OSSIM configuration (http://blog.davidvassallo.me/?p=1664)

nxlog.conf

define ROOT /nxlog

Moduledir /usr/local/libexec/nxlog/modules
CacheDir %ROOT%/data
Pidfile %ROOT%/data/nxlog.pid
SpoolDir %ROOT%/data
LogFile %ROOT%/data/nxlog.log

<Extension _syslog>
    Module      xm_syslog
</Extension>

<Extension json>
    Module	xm_json
</Extension>	

<Input in_ossim>
 Module im_file
 File '/var/ossim/logs/*.log'
 SavePos TRUE
 ReadFromLast TRUE
 PollInterval 1
 Exec $Message = $raw_event;
</Input>



<Output out_ossim>
    	Module om_tcp
       Port 5142
       Host 192.168.12.68
</Output>



<Route 1>
    Path        in_ossim => out_ossim
</Route>