NXLOG Community Edition Reference Manual for v. Copyright 2. 00. Table of Contents. Introduction. Overview. Features. Multiplatform. Modular architecture. Client server mode. Log message sources and destinations. Importance of security. Scalable multi threaded architecture. High performance IOMessage buffering. Prioritized processing. Forums/getfile/878695' alt='Install The Mdt Extensions For Configuration Manager' title='Install The Mdt Extensions For Configuration Manager' />Download the latest from Windows, Windows Apps, Office, Xbox, Skype, Windows 10, Lumia phone, Edge Internet Explorer, Dev Tools more. Software development and applications programmin on Linux. YoLinux Linux Information Portal includes informative tutorials and links to many Linux sites. The YoLinux. Avoiding lost messages. Apache style configuration syntax. Built in config language. Scheduled tasks. Log rotation. Different log message formats. Advanced message processing capabilites. Offline processing mode. Character set and i. Installation and quickstart. Microsoft Windows. GNULinux. Installing from DEB packages Debian, UbuntuInstalling from RPM packages Cent. OS, Red. HatConfiguring nxlog on GNULinux. Architecture and concepts. History. Concepts. Architecture. 4. Configuration. File inclusion. Constant and macro definitions. Global directives. Modules. Common module directives. Routes. Priority. Path. 5. Language. Types. Expressions. Literals. Fields. Operations. Functions. Statements. Assignment. Block. Procedures. If Else. Variables. Statistical counters. List of available functions and procedures. Functions and procedures exported by core. Functions and procedures exported by modules. Modules. Extension modules. CSV xmcsvJSON xmjsonXML xmxmlKey value pairs xmkvpGELF xmgelfCharacter set conversion xmcharconvFile operations xmfileopMulti line message parser xmmultilineSyslog xmsyslogExternal program execution xmexecPerl xmperlWTMP xmwtmpInput modules. Fields generated by core. DBI imdbiProgram imexecFile imfileInternal iminternalKernel imkernelMark immarkMS Event. Log for Windows XP2. MS Event. Log for Windows 2. Vista and later immsvistalogNull imnullTLSSSL imsslTCP imtcpUDP imudpUnix Domain Socket imudsProcessor modules. Blocker pmblockerBuffer pmbufferEvent correlator pmevcorrFilter pmfilterMessage deduplicator pmnorepeatNull pmnullPattern matcher pmpatternMessage format converter pmtransformerOutput modules. Blocker omblockerDBI omdbiProgram omexecFile omfileHTTPs omhttpNull omnullTLSSSL omsslTCP omtcpUDP omudpUDS omuds7. Offline log processingnxlog processor. Reading and receiving logs. Operating Systems. Microsoft Windows. GNULinux. Android. Network. UDPTCPTLSSSL over TCPSyslog. Database. Using imdbi. Using imodbc. Files. External programs and scripts. Applications. Apache HTTP Server. Apache Tomcat and java application logs. Devices. Cisco. Checkpoint. Processing logs. Parsing various formats. W3. C Extended Log File Format. NCSA Common Log File Format. NCSA Combined Log Format. Web. Trends Enhanced Log Format WELFField delimited formats CSVJSONXMLParsing date and time strings. Filtering messages. Using dropFiltering through pmfilter. Dealing with multi line messages. Using module variables. Using xmmultiline. Alerting, calling external scripts and programs. Sending all messages to an external program. Invoking a script or program for each message. Alerting. Rewriting and modifying messages. Message format conversion. Character set conversion. Discarding messages. Rate limiting. Buffering. Pattern matching and message classification. Regular expressions in the Exec directive. Using pmpattern. Event correlation. Log rotation and retention. Explicit drop. 10. Forwarding and storing logs. Data format of the output. Forwarding over the network. Sending to sockets and files. Storing logs in a database. Tips and tricks. Detecting a dead agent or log source. Troubleshootingnxlogs internal logs. Check the contents of the Log. File. Injecting own logs into a route. Log. Level. Running in foreground. Using loginfo in the Exec directive. Common problems. Missing logdatanxlog failed to start, cannot read configuration filenxlog. Connection refused when trying to connect to imtcp or imssl. Debugging and dumping messages. List of Examples. File inclusion example. Config file inclusion with wildcards. Example for using defines. Incorrect use of a define. Two scheduled jobs in the context of the imtcp module. Exec statement spanning multiple lines. Equivalent use of statements in Exec. TCP input assuming nxlog format. TCP output sending messages in nxlog format. Route block. 4. 1. Prioritized processing. Different routes. Using brackets around expressions. Unsetting a value of a field. Setting an integer value. Setting a string value. A regular expression match operation. Setting a datetime value. Typical use of the not operand. Unary negation. 5. Use of the unary defined operation. Regular expression based string matching. Replace whitespace occurences. Dot matches all characters. Regular expression based string matching. Comparing integers. Comparing for inequality. Less. 5. 1. 7. Less or equal. Greater. 5. 1. 9. Greater or equal. And operation. 5. Or. 5. 2. 2. Concatenation. Subtraction. 5. 2. Multiplication. 5. Division. 5. 2. 6. Modulo. 5. 2. 7. Function call. Assignment. 5. 2. Conditional statement block. Procedure call. 5. Conditional statements. Emulating switch with if else. Simple event correlation using module variables. Simple event correlation using statistical counters. Complex CSV format conversion. Syslog to JSON format conversion. Converting Windows Event. Log to Syslog encapsulated JSON6. Syslog to XML format conversion. Converting Windows Event. 123 Flash Chat Software Cracking. Log to Syslog encapsulated XML6. Simple KVP parsing. Parsing KVPs in Cisco ACS syslog. Anno 2070 Save File. Parsing KVPs in Sidewinder logs. Parsing URL request parameters in Apache access logs. Sending Windows Event. Log to Graylog. 2 in GELF6. Forwarding custom log files to Graylog. GELF6. 1. 2. Parsing a CSV file and sending it to Graylog. GELF6. 1. 3. Character set autodetection of various input encodings. Rotation of the internal Log. File. 6. 1. 5. Parsing multi line XML logs and converting to JSON6. Parsing DICOM logs. Multi line messages with a fixed string header. Multi line messages with fixed line count. Multi line messages with a syslog header. Sending a file as BSD syslog over UDP6. Collecting BSD style syslog messages over UDP6. Collecting IETF style syslog messages over UDP6. Collecting both IETF and BSD style syslog messages over the same UDP port. Collecting IETF style syslog messages over TLSSSL6. Forwarding IETF syslog over TCP6. Conditional rewrite of the syslog facility version 1. Conditional rewrite of the syslog facility version 2. Sending email alerts. Using the built in perl interpreter. WTMP to JSON format conversion. Reading from a My. SQL database. 6. 3. Emulating imfile. Forwarding logs from a file to a remote host. Forwaring internal messages over syslog udp. Storing raw kernel logs into a file. Using the immark module. Forwarding Event. Logs from a windows machine to a remote host. Forwarding Event. Logs from a windows machine to a remote host. Reading binary data forwarded from another nxlog agent. Using the imtcp module. Using the imudp module. Using the imuds module. Using the pmblocker module. Using a memory buffer to protect against udp message loss. Correlation rules. Dropping messages conditionally. Filtering messages. Filtering out duplicated messages. A simple pattern database. Using the pmpattern module. Using the pmtransformer module. Testing buffering with the omblocker module. Storing syslog in a Postgre. SQL database. 6. 5. Storing logs in a My. SQL database. 6. 5. Piping logs to an external program. Storing raw syslog messages into a file. File rotation based on size. Sending logs over HTTPS6. Writing nxlog binary data to another nxlog agent.