Skip to content

Instantly share code, notes, and snippets.

@mzpqnxow

mzpqnxow/nxlog-config-for-wef-server.conf

Forked from neu5ron/nxlog-config-for-wef-server.conf
Created February 1, 2018 23:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mzpqnxow/4572f059a661e6903c736c0112e40e7b to your computer and use it in GitHub Desktop.
Save mzpqnxow/4572f059a661e6903c736c0112e40e7b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
nxlog-config-for-wef-server.conf
#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
<Extension _json>
Module xm_json
</Extension>
<Input WinEvtsIn>
Module im_msvistalog
Channel ForwardedEvents
</Input>
<Output LogstashOut>
Module om_tcp
Host #TODO:$LogstasthIPHere
Port #TODO:$LogstashPortHere
Exec to_json(); $message = $raw_event;
</Output>
<Route 1>
Path WinEvtsIn => LogstashOut
</Route>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment