Skip to content

Instantly share code, notes, and snippets.

@matbor
Created July 10, 2015 01:50
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save matbor/a00331c968e1ea68112f to your computer and use it in GitHub Desktop.
Save matbor/a00331c968e1ea68112f to your computer and use it in GitHub Desktop.
nxlog config file for windows 8.1 to send data to graylog server. check the ip address!
## This is a sample configuration file. See the nxlog reference manual about the
## configuration options. It should be installed locally and is also available
## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html
## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.
#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
<Extension gelf>
Module xm_gelf
</Extension>
<Input in>
Module im_msvistalog
ReadFromLast FALSE
SavePos FALSE
Query <QueryList>\
<Query Id="0">\
<Select Path="Application">*</Select>\
<Select Path="System">*</Select>\
<Select Path="Security">*</Select>\
</Query>\
</QueryList>
</Input>
<Output out>
Module om_udp
Host 200.200.200.221
Port 12201
OutputType GELF
</Output>
<Route 1>
Path in => out
</Route>
@GuruAhuja
Copy link

Thanks for config, copied the same to windows 10 nxlog conf file and created system/input -> Inputs -> GELF UDP - Launch new input with port 12201 and did the configuration but GELP UDP "Failed"
pls help getting same message for windows server 2012 also, need to add five windows server ....

@terasaka
Copy link

I tested it on windows 10 and it is working. Thank you for sharing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment