Access Denied Error for additional log

This support forum board is for support questions relating to Nagios Log Server, our solution for managing and monitoring critical log data.
Locked
mejokj
Posts: 353
Joined: Mon Jul 22, 2013 10:31 pm

Access Denied Error for additional log

Post by mejokj »

Screenshot 2022-03-17 102459.jpg
Screenshot 2022-03-17 102459.jpg
Hello,

I'm trying to send additional log files to Nagios Log Server from a windows server. But I'm getting Access Denied error from NLS. Please find the nxlog settings below.

## See the nxlog reference manual at
## http://nxlog.org/nxlog-docs/en/nxlog-re ... anual.html

## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.
#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog
define CERT %ROOT%\cert

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

# Include fileop while debugging, also enable in the output module below
#<Extension fileop>
# Module xm_fileop
#</Extension>

<Extension json>
Module xm_json
</Extension>

<Extension syslog>
Module xm_syslog
</Extension>

<Input internal>
Module im_internal
</Input>

# Watch your own files
<Input file1>
Module im_file
File '%ROOT%\data\nxlog.log'
SavePos TRUE
Exec $Message = $raw_event;
</Input>
<Input openvpn>
Module im_file
File '%ROOT%\OpenVPN\log'
SavePos FALSE
ReadFromLast FALSE
Exec $Message = $raw_event;
</Input>

# Windows Event Log
<Input eventlog>
# Uncomment im_msvistalog for Windows Vista/2008 and later
Module im_msvistalog

# Uncomment im_mseventlog for Windows XP/2000/2003
# Module im_mseventlog
</Input>

<Output out>
Module om_tcp
Host 192.168.0.103
Port 3515

Exec $tmpmessage = $Message; delete($Message); rename_field("tmpmessage","message");
Exec $raw_event = to_json();

# Uncomment for debug output
# Exec file_write('%ROOT%\data\nxlog_output.log', $raw_event + "\n");
</Output>

<Route 1>
Path internal, file1, eventlog, openvpn => out
</Route>


Also find the attached screenshot from the NLS.
You do not have the required permissions to view the files attached to this post.
User avatar
kfanselow
Posts: 241
Joined: Tue Aug 31, 2021 3:25 pm

Re: Access Denied Error for additional log

Post by kfanselow »

Hi mejokj,

The message indicates that the user who who nxlog is running as on that system doesn't have permissions somewhere along the path. Please find below a link to one of Microsoft's guides on troubleshooting Access Denied errors:

https://support.microsoft.com/en-us/top ... 182755214e

And a link to nxlog's documentation on access errors:
https://nxlog.co/documentation/nxlog-us ... ess-errors

And their user guide for windows:
https://nxlog.co/documentation/nxlog-us ... ndows.html

Hope this is useful.

Thanks and Best Regards,
Keith
mejokj
Posts: 353
Joined: Mon Jul 22, 2013 10:31 pm

Re: Access Denied Error for additional log

Post by mejokj »

Hello,

We've already added Everyone in windows security for the folder and files.

Also we referred the following link but we couldn't find a settings like System Tools > Local Users and Groups > Groups under computer management.
https://nxlog.co/documentation/nxlog-us ... ess-errors
gsmith
Posts: 1253
Joined: Tue Mar 02, 2021 11:15 am

Re: Access Denied Error for additional log

Post by gsmith »

HI

This is what you should see under Computer Management (compmgmt.msc):
Image009.jpg

If you aren't seeing the same please send a screenshot of what you do get.

Thanks
You do not have the required permissions to view the files attached to this post.
Locked