[nxlog-ce-users] log rotation question

2014-10-16 Thread Ward.P.Fontenot
I currently have nxlog rotating logs every day and a request has come in to rotate them also based on the following criteria: 1. Size 2. When a keyword is detected Is this combination feasible and if so are there anything's that I should be aware of before attempting this? i.e. order in

Re: [nxlog-ce-users] log certain entries

2014-11-17 Thread Ward.P.Fontenot
I got it, log_info() was dropping those messages into the nxlog internal log. I've got it working correctly now. From: Fontenot, Ward P. Sent: Monday, November 17, 2014 10:44 AM To: nxlog-ce-users@lists.sourceforge.net Subject: log certain entries Hi, I've got a need to log only error mes

[nxlog-ce-users] log certain entries

2014-11-17 Thread Ward.P.Fontenot
Hi, I've got a need to log only error messages from one of our applications, I was looking to use something like this Execif $Message =~ /ERROR/ log_info($Message); But that only logs everything. Any pointer would be great. Paul Fontenot Enterprise Key Management & Public Key Infrastructu

[nxlog-ce-users] Time

2015-01-21 Thread Ward.P.Fontenot
Is there a way to change input log date / time to GMT -8? Paul Fontenot Enterprise Key Management & Public Key Infrastructure | EIST&O | ETS | TOG | Wells Fargo 2600 S. Price Rd. 2nd Floor | Chandler, AZ 85286 MAC S3939-022 Cell (480) 253-2908 ward.p.fonte...@wellsfargo.com This message may co

Re: [nxlog-ce-users] Time

2015-01-21 Thread Ward.P.Fontenot
That's not very clear, I need to adjust the date / time entries in the log to GMT -8 -Original Message- From: ward.p.fonte...@wellsfargo.com [mailto:ward.p.fonte...@wellsfargo.com] Sent: Wednesday, January 21, 2015 12:13 PM To: nxlog-ce-users@lists.sourceforge.net Subject: [nxlog-ce-users

[nxlog-ce-users] Regex help

2015-02-05 Thread Ward.P.Fontenot
Hi, I am currently using the following in a patternsdb.xml file and it is working well but I now need to exclude some of those matches. 9 successful-logon Message REGEXP An account was successfully logged on exec_async("/bin/sh", "-c", 'echo "Message from ' + $Hostnam

[nxlog-ce-users] filter on $Hostname

2016-06-14 Thread Ward.P.Fontenot
I think I'm at a point where I can't see the forest because of the trees, how do you write logs based on $Hostname? I have everything coming in on one port and writing to one log and I have no problem seeing the $Hostname in the log. I would like to know if there is a way to have the logs separa

Re: [nxlog-ce-users] filter on $Hostname

2016-06-15 Thread Ward.P.Fontenot
Thank you Shedi, that was perfect. From: Shedi Shedi [mailto:she...@gmail.com] Sent: Tuesday, June 14, 2016 2:24 PM To: nxlog-ce-users@lists.sourceforge.net Subject: Re: [nxlog-ce-users] filter on $Hostname Hi Ward, There’s a nice example in the documentation titled "Example 6.58. File rotation

[nxlog-ce-users] Windows INFO

2016-06-27 Thread Ward.P.Fontenot
I'm trying to dump all logs with INFO like the one below - 2016-06-27 15:25:01 SOME_WINDOWS_SERVER INFO 5857 NT AUTHORITY\LOCAL SERVICE WmiPerfInst provider started with result code 0x0. HostProcess = wmiprvse.exe; ProcessID = 7328; ProviderPath= C:\Windows\system32\wbem\WmiPerfInst.dll And had

Re: [nxlog-ce-users] Windows INFO

2016-06-28 Thread Ward.P.Fontenot
Thank you, that was it. I am now keeping one output and route just for json so I can tell what the fields are for filtering purposes. -Original Message- From: Botond Botyanszki [mailto:b...@nxlog.org] Sent: Monday, June 27, 2016 11:23 PM To: nxlog-ce-users@lists.sourceforge.net Subject:

Re: [nxlog-ce-users] Calling external script for log rotation

2016-11-07 Thread Ward.P.Fontenot
I do, I run nx as nx and all the file permissions are correct. I'll have to take a look at it later, I'm sure it's something obvious. -Original Message- From: Botond Botyanszki [mailto:b...@nxlog.org] Sent: Monday, November 07, 2016 10:53 AM To: nxlog-ce-users@lists.sourceforge.net Subje

[nxlog-ce-users] Scheduling and Log Rotation

2014-07-30 Thread Ward.P.Fontenot
I have the following configuration and am experiencing an issue where the log rotates correctly from %LOG% to %LOG%.1 etc... but nxlog continues to write to %LOG$.1 and not reopen %LOG%. I have attempted to use logs_out->reopen() and that doesn't reopen %LOG%. Is there something that I am missing

[nxlog-ce-users] Pattern issue

2014-07-31 Thread Ward.P.Fontenot
I'm stumped and need a little push in the right direction I'm using this input - Module im_tcp Host 192.168.0.10 Port 5300 Exec parse_syslog_bsd(); T

Re: [nxlog-ce-users] Pattern issue

2014-08-04 Thread Ward.P.Fontenot
I’m fairly familiar with regular expressions so that’s not an issue – admittedly my question was poorly written. I was actually hoping an answer would come across telling me that based on the breakdown of the log entry <13>Jul 31 14:32:01 INFO [org.apache.commons.logging.impl.Log4JLogger] [

Re: [nxlog-ce-users] Pattern issue

2014-08-05 Thread Ward.P.Fontenot
Thanks for the log_info() tip, that showed me exactly what I was missing. -Original Message- From: Botond Botyanszki [mailto:b...@nxlog.org] Sent: Monday, August 04, 2014 2:12 PM To: nxlog-ce-users@lists.sourceforge.net Subject: Re: [nxlog-ce-users] Pattern issue Hi Paul, You should fir

[nxlog-ce-users] Windows logs

2014-08-07 Thread Ward.P.Fontenot
What is the most human readable format nxlog can output for Windows logs - 2008R2 if it matters? I use Binary to get them from the client to the log server and output them in json format to be stored in logstash. I'd like a human readable output as well for taking a quick glance, having sent via em

[nxlog-ce-users] pm_buffer question

2014-08-18 Thread Ward.P.Fontenot
I have two questions about pm_buffer 1. If you do not specify a Directory when using 'Type Disk' where does the buffer get written? 2. How do you specify a Directory in this context on a Windows server? I have used just about every variation of Directory D:\buffer\ I can think of using n