I forgot to post it when I got finished.

Will reply to the group in the morning. 



Sent from my iPhone

> On Jan 22, 2017, at 6:21 PM, Wil Hutchins <[email protected]> wrote:
> 
> How did you guys go with getting Exchange 2013 info into Graylog?
> 
>> On Saturday, 21 May 2016 11:56:27 UTC+10, Dustin Tennill wrote:
>> That sounds pretty interesting, and I would like to help.
>> 
>> I was planning on trying to get a script together that would send message 
>> tracking logs into graylog this weekend. 
>> 
>> Dustin
>> 
>> 
>> 
>> 
>>> On Thursday, May 19, 2016 at 5:53:10 AM UTC-4, Rob wrote:
>>> Hi,
>>> 
>>> I have my Windows Event logs going to my Graylog servers like a charm - its 
>>> great.
>>> 
>>> With Exchange 2013 if you turn on Auditing the logs are stored with the 
>>> users mailbox and not in the Event log.
>>> 
>>> You can purchase 3rd party apps like Netwrix to send them to the Event log.
>>> 
>>> Is there a plugin or way to get the logs into Graylog say via nxlog without 
>>> using a paid 3rd party app?
>>> 
>>> There is a way to export the logs to an xml file - so maybe a scheduled 
>>> task could be created to create the xml files and the nxlog could send to 
>>> Graylog?
>>> 
>>> Any suggestions, tips or pointing me to some doco or plugins would be much 
>>> appreciated.
> 
> -- 
> You received this message because you are subscribed to a topic in the Google 
> Groups "Graylog Users" group.
> To unsubscribe from this topic, visit 
> https://groups.google.com/d/topic/graylog2/p6r8c38gHAQ/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to 
> [email protected].
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/graylog2/0c00b8ea-d2f8-4dc6-bb43-5143d79c612c%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/DB2AAB28-BCDF-428C-B998-50E92F495D0D%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to