Hello, I’m new on graylog’s community, I have installed a Graylog on a debian 11 bullseye. My problem is, I want to collect all events of my windows server. First I have installed nxlog on my server sender, but there’s no version of nxlog-ce for debian 11. Second, I have uninstalled nxlog on win…

For Windows machines, you can use WinLogBeat.exe that comes installed with Sidecar. If you choose to stay with beats, you can use filebeat on the debian instance to ship it’s logs into Graylog - this way you would likely only need one Graylog Beats Input to receive it all. Here are some settings f…

hello, Thanks for your help but that don’t or I do something wrong: The collector winlogbeat exist but I can’t activate it, I’m on debian “C:\Program Files\Graylog\sidecar\winlogbeat.exe” don’t exist. What config I do on debian? On Collector administration, I have only filebeat and nxlog If I u…

[image] chnick: The collector winlogbeat exist but I can’t activate it, I’m on debian winlogbeat (and C:\Program Files\Graylog\sidecar\winlogbeat.exe) is exclusive to the Windows environment. for Debian, you would use filebeat. You mention that as well in your last post… I am not sure wher…

Hello, The confusion is on the sidecar.yml example, all path goes to C:\program files… What is the better way for collect all windows event on my graylog server? I have installed for test nxlog on a server windows and it send log without sidecar, only an input. What is the gain in this way to com…

Hello @chnick When posting configuration files or code, please use the Markdown. I have adjusted you post to reflect this. :+1: You can find more here How to Post a Question in the Community that Gets Responses

The advantage of sidecar is you can push a single consistent configuration to multiple client sidecar machines using the Graylog GUI. Using nxlog or beats is a preference, both of them can be manged (start, stop, configured…) from Graylog once you have it connected. Review the documentation, it e…

OK thanks for all. I finally reinstall ubuntu 20.04 in place of debian 11 for the compatibility with nxlog.

I am not sure that is required, Ubuntu is an offshoot of Debian… Where did you see that nxlog is incompatible with Debian?

Hello, but nxlog ce is available in ubuntu 20.04 and not on debian 11. (cf: NXLog Community Edition - Downloads | nxlog.co ) Thanks for your help and for the lost time, but that’s help me in my new installation. I have installed an ubuntu 20.04 and I don’t have meesage, I open a new topic :wink:

Hello @chnick [image] chnick: My problem is, I want to collect all events of my windows server. Nxlog or Winlogbeat is your preferred shippers for Windows operating systems. [image] chnick: First I have installed nxlog on my server sender, but there’s no version of nxlog-ce for debian 1…

What collector on sidecar use with winlogbeat with a graylog on debian 11?

Graylog Central (peer support)

gsmith (GSmith) February 22, 2022, 12:25am 6

Hello @chnick

When posting configuration files or code, please use the Markdown. I have adjusted you post to reflect this.
You can find more here

How to Post a Question in the Community that Gets Responses

Topic		Replies	Views
I can't see winlogbeat logs Graylog Central (peer support) sidecar , filebeat-windows , winlogbeat	19	5549	July 6, 2021
No Collectors to display Graylog Central (peer support) sidecar , nxlog , filebeat-windows , winlogbeat , nodatanx	24	6127	July 11, 2019
Graylog INPUT Beat Graylog Central (peer support) sidecar , nxlog , filebeat-linux , filebeat-windows , winlogbeat , nodatanx , nosendlogfblx , clfblx	10	6007	July 31, 2020
Filebeat configuration on Windows Graylog Central (peer support) sidecar , nxlog , filebeat-linux , filebeat-windows , winlogbeat , nodatanx , nosendlogfblx	4	2554	August 31, 2020
UBUNTU Sidecar log Config fail Graylog Central (peer support)	12	587	October 12, 2022

What collector on sidecar use with winlogbeat with a graylog on debian 11?

Related topics