Hello, We have a nxlog 2.9.1347 running on a windows 2003.
Max log size of eventlog is configured at 16MB. After I restart remote end point (logstash in our case), next appear on log: 2015-12-10 14:20:50 ERROR couldn't connect to tcp socket on xxx:5514; No se ha podido establecer conexión ya que el equipo de destino ha denegado activamente dicha conexión. 2015-12-10 14:21:06 INFO connecting to 10.189.4.194:5514 2015-12-10 14:22:14 INFO Successfully reopened Security EventLog 2015-12-10 14:22:14 WARNING got ERROR_INVALID_PARAMETER (errorcode: 87) for the Security log, will try to reopen in 600 sec. ReadFromLast is TRUE and will try to restart from the last position. This might result in uncollected logs. 2015-12-10 14:32:15 INFO Successfully reopened Security EventLog 2015-12-10 14:32:15 WARNING got ERROR_INVALID_PARAMETER (errorcode: 87) for the Security log, will try to reopen in 600 sec. ReadFromLast is TRUE and will try to restart from the last position. This might result in uncollected logs. 2015-12-10 14:42:15 INFO Successfully reopened Security EventLog Microsoft recommend 2MB [1] to avoid such error, but when I restart nxlog it works again, so I think it is possible to release log file and open again (I'm not sure of course) Do you have any recommendation? Thank you very much [1] https://support.microsoft.com/en-us/kb/177199 ------------------------------------------------------------------------------ _______________________________________________ nxlog-ce-users mailing list nxlog-ce-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nxlog-ce-users
