Graylog not receive information from windows

Hi, i configure graylog on ubuntu server 18, all right but i install NXLOG on my Windows Server and configure the file nxlog.conf with this information

define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

Module xm_gelf # Use 'im_mseventlog' for Windows XP and 2003 Module im_msvistalog Exec if ($EventID == 4202 or $EventID == 4208 or $EventID == 4302 or $EventID == 4304 or $EventID == 5004) drop();\ else{\ if ( $EventType == "INFO" ) $SyslogSeverityValue = 6;\ if ( $EventType == "WARNING" ) $SyslogSeverityValue = 4;\ if ( $EventType == "ERROR" ) $SyslogSeverityValue = 3;\ } Module om_udp Host Port 12201 OutputType GELF

<Route 1>
Path in => out

But in my graylog i not see information of the server. Please help me.

Please format your posting ( ) than it might happen that someone helps you.

Did you check if no Firewall prevents the messages coming in? Did you create a UDP GELF Input on Port 12201? Did you check if the Windows host can reach Graylog?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.