## This is a sample configuration file. See the nxlog reference manual about the
## configuration options. It should be installed locally and is also available
## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html

## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.

#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

<Extension charconv>
    Module      xm_charconv
    AutodetectCharsets utf-8, euc-jp, utf-16, utf-32, iso8859-2
</Extension>

<Extension syslog>
    Module	xm_syslog
</Extension>

<Input in>
    Module      im_msvistalog
# For windows 2003 and earlier use the following:
#   Module      im_mseventlog

    Exec if not ($EventID == 100 or $EventID == 101 or $EventID == 102 or $EventID == 103 or $EventID == 104 or $EventID == 105 or $EventID == 106 or $EventID == 107 or $EventID == 108) drop();
</Input>

<Output out>
    Module      om_tcp
    Host        &POLICY_SERVER&
    Port        514
    Exec	convert_fields("AUTO", "utf-8");

    Exec	to_syslog_bsd();
</Output>

<Route 1>
    Path        in => out
</Route>