nxlog W2K3R2 send IIS6/Windows Application/System Eventlogs sent to nxlog target via internal nxlog binary format

nxlog.conf

## This is a sample configuration file. See the nxlog reference manual about the
## configuration options. It should be installed locally and is also available
## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html

## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.

define ROOT C:\Program Files\nxlog
#define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

<Input in>
    Module      im_mseventlog
	#Only process Eventlogs from Applications and System Event logs
    Sources	Application,System
	Exec	$app = "apptag";
</Input>

<Input iis>
    Module	im_file
    File	"d:\IIS-LOGS\ex*"
    ReadFromLast TRUE
    Exec	if $raw_event =~ /^#/ drop(); \
            $app = "apptag";
</Input>

<Output out-tcp-514>
    Module      om_tcp
    Host        1.1.1.1
    Port        514
	OutputType	Binary
</Output>

<Output out2>
    Module	om_file
    File	"c:\\temp\\nxlogtestout.log"
</Output>

<Output out-tcp-6699>
    Module      om_tcp
    Host        1.1.1.1
    Port        6699
	OutputType	Binary
</Output>

<Route 1>
    Path        in => out-tcp-514
</Route>

<Route 2>
    Path        iis => out-tcp-6699
</Route>

config for Windows 2003 32bit OS