Dash Board view for the windows ,linux esxi seperately

[anish]

Hi ,

How to create a dashboard based on OS for example I need a separate dash board to view the logs getting collecting from Windows ,linux ,esxi hosts separately . How to view the entire host list which are sending the logs to the particular Nagios Log server .

[mcapra]

There's a few ways to go about it. Typically, people will break down their logs by "type", so you'd have a "windows" type, a "linux" type, an "esxi" type, etc. Then, they would apply a filter to their dashboard for that specific type of log.

You'd need to first be filtering your logs by the type of machine they are coming from though. Typically, an input rule with a dedicated port for each log type is the easiest way to go about that. Something like this:

Code: Select all

tcp {
    type => 'windows'
    port => 4000
}
tcp {
    type => 'linux'
    port => 4001
}
tcp {
    type => 'esxi'
    port => 4002
}

Though don't do that directly because nxlog ships Windows eventlogs as JSON by default