Hi everyone.
I've been trying to set up nxlog to send Windows DHCP logs (files) to a syslog
server.
This is my config:
---
define ROOT C:\Program Files (x86)\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
<Extension syslog>
Module xm_syslog
</Extension>
<Input dhcplogs>
Module im_file
File "C:\\Windows\\Sysnative\\dhcp\\DhcpSrvLog-*.log"
SavePos TRUE
InputType LineBased
</Input>
<Output out_syslog>
Module om_tcp
Host syslog.company.com
Port 514
# Exec to_syslog_ietf();
</Output>
<Output out_file>
Module om_file
File "C:\\Temp\\nxlog_test.log"
</Output>
<Route 1>
Path dhcplogs => out_syslog
# Path dhcplogs => out_file
</Route>
---
This is the result if I use out_file:
31,10/18/13,13:03:42,DNS Update
Failed,172.22.4.8,Android_358967047075518.company.com,,,0,6,,,
30,10/18/13,13:03:42,DNS Update
Request,172.22.4.8,Android_358967047075518.company.com,,,0,6,,,
11,10/18/13,13:03:42,Renew,172.22.4.8,Android_358967047075518.company.com,188796184855,,3956269338,0,,,
Perfect result, exactly as the source.
This is the result if I use out_syslog:
Oct 18 13:10:41 windowsserver.company.com 10/18/13,13: 10:40,DNS Update Fa
Oct 18 13:10:41 windowsserver.company.com
iled,172.22.8.168,CLIENTNAME.company.com,,,0,6,,,#015
Oct 18 13:10:41 windowsserver.company.com 10/18/13,13: 10:40,DNS Update R
Oct 18 13:10:41 windowsserver.company.com
equest,172.22.8.168,CLIENTNAME.company.com,,,0,6,,,#015
Oct 18 13:10:41 windowsserver.company.com 10/18/13,13
Oct 18 13:10:41 windowsserver.company.com :
10:40,Renew,172.22.8.168,CLIENTNAME.company.com,8C705A44A45C,,1006009217,0,,,#015
Oct 18 13:10:42 windowsserver.company.com 10/18/13,13: 10:41,DNS Update Fa
Oct 18 13:10:42 windowsserver.company.com
iled,172.22.24.19,android-eb545ee5cd9f7ae3.company.com,,,0,6,,,#015
Oct 18 13:10:42 windowsserver.company.com 10/18/13,13: 10:41,DNS Update R
Oct 18 13:10:42 windowsserver.company.com
equest,172.22.24.19,android-eb545ee5cd9f7ae3.company.com,,,0,6,,,#015
Oct 18 13:10:42 windowsserver.company.com 10/18/13,13
Oct 18 13:10:42 windowsserver.company.com :
10:41,Renew,172.22.24.19,android-eb545ee5cd9f7ae3.company.com,60A44C81D779,,2242570168,0,,,#015
Each log line is spread over two lines, seemingly at recurring intervals. There
are also spaces inserted, ie "13:10:41" is logged as "13: 10:41".
Any ideas?
Cheers,
Daniel
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135031&iu=/4140/ostg.clktrk
_______________________________________________
nxlog-ce-users mailing list
nxlog-ce-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
