NxLog Help - Logs Not Fully Ingesting

Graylog Central (peer support)
2

Hey @a7ebouovue8v

Not sure what you have going on with NXlog and its hard to read your configuration file, BUT here mine perhaps that will help.

define ROOT C:\Program Files (x86)\nxlog
define LOGFILE C:\Program Files (x86)\nxlog\data\nxlog.log


Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
LogLevel INFO

<Extension _fileop>
    Module xm_fileop
    # Check the log file size every hour and rotate if larger than 5 MB
    <Schedule>
        Every 1 hour
        <Exec>
            if (file_exists('%LOGFILE%') and file_size('%LOGFILE%') >= 5M)
                file_cycle('%LOGFILE%', 8);
        </Exec>
    </Schedule>
    # Rotate log file every week on Sunday at midnight
    <Schedule>
        When    @weekly
        Exec    if file_exists('%LOGFILE%') file_cycle('%LOGFILE%', 8);
    </Schedule>
</Extension>

<Extension gelf>
    Module      xm_gelf
 </Extension>
 
<Input zone-01>
    Module      im_msvistalog
      Query <QueryList>\
                     <Query Id="0">\
                        <Select Path="Application">*</Select>\
                        <Select Path="System">*</Select>\
                        <Select Path="Security">*</Select>\
                       <Select Path="Setup">*</Select>\
                      </Query>\
     </QueryList>  
</Input>

<Output out>
    Module      om_tcp 
    Host        graylog.domain.com
    Port        51412
    OutputType  GELF_TCP         
    Exec $Hostname = hostname_fqdn();
    Exec $FullMessage = $raw_event;    
</Output>

<Route >
    Path        zone-01 => out
</Route>