I have managed to get several logs from Squid proxies and IIS servers coming into my NLS setup nicely and am starting to look at including custom logs. I have one log which produces output similar to the following:
Code: Select all
2015-01-09 12:36:00,051 [13] INFO [DOMAIN\userid] Closing put queue
Code: Select all
<Extension w3c>
Module xm_csv
Fields $date, $time, $number, $loglevel, $user, $logmessage
FieldTypes string, string, string, string, string
Delimiter ' '
</Extension>
<Input MQLog>
Module im_file
File "D:\\Logs\\MQApplicationLog.log"
SavePos TRUE
Exec if $raw_event =~ /^#/ drop(); \
else \
{ \
w3c->parse_csv(); \
$SourceName = "MQLog"; \
$Message = to_json(); \
}
</Input>
I have also looked at adding a filter via the Global configuration but I wasn't able to get that working either. I have looked through countless nxlog.conf examples but just can't see what I am missing.