I’m having trouble receiving event IDs 6272 and 6273. I can see these event IDs in the event viewer.
Other types of event viewer logs appear in Graylog, only the NPS logs don’t. Can you help me figure out what the problem might be?
Panic Soft
#NoFreeOnExit TRUE
define ROOT C:\Program Files\nxlog
define CERTDIR %ROOT%\cert
define CONFDIR %ROOT%\conf
define LOGDIR %ROOT%\data
define LOGFILE %LOGDIR%\nxlog.log
LogFile %LOGFILE%
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
<Route 1>
Path eventlog => out
Previously, I was receiving the NPS logs normally, but I needed to reconfigure NPS on the AD server. The event ID appears in the event viewer, but not in Graylog.