I have nxlog configured to send logs from a DHCP server to my Graylog cluster. It works fine for system-generated events, but I want the following: Windows DHCP Server stores the log of IP leases/renews in files located at %Windir%\System32\DHCP. It makes one file per day, then re-writes each file every week.
I would like to send the contents of these files to Graylog using nxlog, if possible. It’d be perfect if nxlog could send the entries in real-time. Also, the files are in csv format. Is there a particular type of input I would need to create in Graylog in order to handle CSV format?