Rudder

## This is a sample configuration file. See the nxlog reference manual about the

## configuration options. It should be installed locally and is also available

## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html

## Please set the ROOT to the folder your nxlog was installed into,

## otherwise it will not start.

#define ROOT C:\Program Files\nxlog

define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules

CacheDir %ROOT%\data

Pidfile %ROOT%\data\nxlog.pid

SpoolDir %ROOT%\data

LogFile %ROOT%\data\nxlog.log

<Extension charconv>

Module xm_charconv

AutodetectCharsets utf-8, euc-jp, utf-16, utf-32, iso8859-2

</Extension>

<Extension syslog>

Module xm_syslog

</Extension>

<Input in>

Module im_msvistalog

# For windows 2003 and earlier use the following:

# Module im_mseventlog

Exec if not ($EventID == 100 or $EventID == 101 or $EventID == 102 or $EventID == 103 or $EventID == 104 or $EventID == 105 or $EventID == 106 or $EventID == 107 or $EventID == 108) drop();

</Input>

<Output out>

Module om_tcp

Host &POLICY_SERVER&

Port 514

Exec convert_fields("AUTO", "utf-8");

Exec to_syslog_bsd();

</Output>

<Route 1>

Path in => out

</Route>