Nagios Support Forum

Hello,

I'm trying to send additional log files to Nagios Log Server from a windows server. But I'm getting Access Denied error from NLS. Please find the nxlog settings below.

## See the nxlog reference manual at
## http://nxlog.org/nxlog-docs/en/nxlog-re ... anual.html

## Please set the ROOT to the folder your nxlog was installed into,
## otherwise it will not start.
#define ROOT C:\Program Files\nxlog
define ROOT C:\Program Files (x86)\nxlog
define CERT %ROOT%\cert

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

# Include fileop while debugging, also enable in the output module below
#<Extension fileop>
# Module xm_fileop
#</Extension>

<Extension json>
Module xm_json
</Extension>

<Extension syslog>
Module xm_syslog
</Extension>

<Input internal>
Module im_internal
</Input>

# Watch your own files
<Input file1>
Module im_file
File '%ROOT%\data\nxlog.log'
SavePos TRUE
Exec $Message = $raw_event;
</Input>
<Input openvpn>
Module im_file
File '%ROOT%\OpenVPN\log'
SavePos FALSE
ReadFromLast FALSE
Exec $Message = $raw_event;
</Input>

# Windows Event Log
<Input eventlog>
# Uncomment im_msvistalog for Windows Vista/2008 and later
Module im_msvistalog

# Uncomment im_mseventlog for Windows XP/2000/2003
# Module im_mseventlog
</Input>

<Output out>
Module om_tcp
Host 192.168.0.103
Port 3515

Exec $tmpmessage = $Message; delete($Message); rename_field("tmpmessage","message");
Exec $raw_event = to_json();

# Uncomment for debug output
# Exec file_write('%ROOT%\data\nxlog_output.log', $raw_event + "\n");
</Output>

<Route 1>
Path internal, file1, eventlog, openvpn => out
</Route>


Also find the attached screenshot from the NLS.

Hi mejokj,

The message indicates that the user who who nxlog is running as on that system doesn't have permissions somewhere along the path. Please find below a link to one of Microsoft's guides on troubleshooting Access Denied errors:

https://support.microsoft.com/en-us/top ... 182755214e

And a link to nxlog's documentation on access errors:
https://nxlog.co/documentation/nxlog-us ... ess-errors

And their user guide for windows:
https://nxlog.co/documentation/nxlog-us ... ndows.html

Hope this is useful.

Thanks and Best Regards,
Keith

Hello,

We've already added Everyone in windows security for the folder and files.

Also we referred the following link but we couldn't find a settings like System Tools > Local Users and Groups > Groups under computer management.
https://nxlog.co/documentation/nxlog-us ... ess-errors

HI

This is what you should see under Computer Management (compmgmt.msc):

If you aren't seeing the same please send a screenshot of what you do get.

Thanks