Hi, I have my Windows Event logs going to my Graylog servers like a charm - its great.
With Exchange 2013 if you turn on Auditing the logs are stored with the users mailbox and not in the Event log. You can purchase 3rd party apps like Netwrix to send them to the Event log. Is there a plugin or way to get the logs into Graylog say via nxlog without using a paid 3rd party app? There is a way to export the logs to an xml file - so maybe a scheduled task could be created to create the xml files and the nxlog could send to Graylog? Any suggestions, tips or pointing me to some doco or plugins would be much appreciated. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/798155e4-b9d3-4ced-bda3-5e1b9ddb6465%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
