German umlauts in Winevent logs

[Ajakob233]

Hello.

we are at the Moment evaluting Nagios for our Usecases.
For Testing i just added some Maschines Switches etc. for Testing.

I came in to one small Problem.
Most of our Windows Server are German -> input errors where solved adding Codepage 850 in input conf for winevent.
Now the logs are working but German Special Umlauts (äüö) are not working properly.

first should be "für", second "ursprüngliche"

Screenshot 2025-01-27 145412.png

abr Alex

[jsimon]

Hi @Ajakob233,

In order to help us diagnose where this umlaut issue is coming from, can you please take a look at the records that display in your Nagios Log Server Dashboard? If you can locate a log record with an umlaut on your dashboard and click on the event, you should be able to view the raw JSON data that was received by Logstash. This will let us know if it's a Logstash parsing error, a Grok filter error, an issue with encoding from nxlog, or some other issue. In addition, it may be helpful to know what version of Nagios Log Server you are running, and the distro/version of the linux system you're running it on.

[Ajakob233]

Hello,

thanks in Advance for your help.

We running 2024R1.3 on Ubuntu Server 24.04.1 LTS .
The Error is in json and Raw.

json

jason.png

raw

raw.png

only change to default we have done ist set codepage (like on Server)
Prior to this, logs where not readable.

winevent.png

wbr Alex

[jsimon]

Based on the fact that the corrupted umlaut characters are in your JSON data, it may be that you need to encode your logs in UTF-8, which Logstash should handle by default. Setting ForceUTF8 to true in your nxlog configuration for your JSON encoding logic should do this. Let us know if this doesn't address the issue.