Skip to content

Instantly share code, notes, and snippets.

@dvas0004
Created Jun 28, 2015
Embed
What would you like to do?
NXLog AlienVault OSSIM configuration (http://blog.davidvassallo.me/?p=1664)
define ROOT /nxlog
Moduledir /usr/local/libexec/nxlog/modules
CacheDir %ROOT%/data
Pidfile %ROOT%/data/nxlog.pid
SpoolDir %ROOT%/data
LogFile %ROOT%/data/nxlog.log
<Extension _syslog>
Module xm_syslog
</Extension>
<Extension json>
Module xm_json
</Extension>
<Input in_ossim>
Module im_file
File '/var/ossim/logs/*.log'
SavePos TRUE
ReadFromLast TRUE
PollInterval 1
Exec $Message = $raw_event;
</Input>
<Output out_ossim>
Module om_tcp
Port 5142
Host 192.168.12.68
</Output>
<Route 1>
Path in_ossim => out_ossim
</Route>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment