Filtering specific event-ids for windows at nxlog

Graylog Central (peer support)
, ,
1

Hi All,

I am new to Graylog. I need help for filtering logs at nxlog for specific eventids only.
below is the current conf file stuff at my nxlog:

…………………………………………………………………………………………………………

This is a sample configuration file. See the nxlog reference manual about the

configuration options. It should be installed locally and is also available

online at http://nxlog.org/docs/

Please set the ROOT to the folder your nxlog was installed into,

otherwise it will not start.

#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

Module xm_syslog Module im_msvistalog # For windows 2003 and earlier use the following: # Module im_mseventlog Module om_tcp Host 0.0.0.0 Port 514 Exec to_syslog_snare();

<Route 1>
Path in => out

………………………………………………………………………….

2

you might want to format your code to make it better readable plus you might want to add your question?