we have graylog 2.2.3 and we have configured graylog sidecar with nxlog on clients.
We have a log of events with severitz INFO. We would like to filter input for windows eventslog in nxlog config.
I need to configure nxlog in sidecar collector on Graylog.
so, i think, i need to change configuration for module im_msvistalog.
How and where to configure this "Exec if ($Severity == ‘INFO’) drop(); " in graylog for input nxlog.
Configure NXLog Inputs?
Define NXLog Snippets?