How to send Windows Event Logs into Graylog
@lennartkoopmann
View on Github
Open Issues
Stargazers
Windows cannot forward EventLog via the network to a central place like Graylog. You’ll have to run an agent that can talk to Graylog. Good news is that there are two officially recommended agents:
Graylog Sidecar
The Graylog Collector Sidecar is a supervisor process for 3rd party log collectors like NXLog or beats. The Sidecar program is able to fetch configurations from a Graylog server and render them as a valid configuration file for various log collectors. You can think of it like a centralized configuration management system for your log collectors.
Please read the official documentation to learn how to use the Graylog Collector Sidecar.
nxlog
The NXLog Community Edition is suitable to forward Windows EventLog to Graylog natively. Please refer to their official documentation for more information.