2

In Windows, I am using the "Eventlog to Syslog" utility to send event logs to the Linux syslog server (syslog-ng). But I am can't do the same with some log files, especially in the case of the IIS log.

Why is it impossible with the named tool?

How could I send these log files to the syslog server using the eventlog to syslog utility?

2
  • I tried to fix your question, because it was interesting, but I won't be any time with you. – peterh May 8 '15 at 3:57
  • Doing so makes windows eventlog not consumable in a standard way, what is not desirable – lalebarde Sep 18 '18 at 13:13
5

I use nxlog for this, which ends up sending Windows event logs, IIS logs, Exchange logs, and more to (in my case) a central nxlog server where it gets written to files and send to an ELK stack. Its free, native and multiplatform, so we use it on Windows and Linux. It can send over TLS too, and can send using JSON if you want.

http://nxlog-ce.sourceforge.net/

9
  • the Linux Syslog server I am using is Syslog-ng, so would it be better to use the same syslog server windows agent,in this case, windows syslog-ng agent – Arun May 8 '15 at 4:37
  • No, as you will lose a lot of information. You can gain a lot by exporting logs uniformly as JSON. – Cameron Kerr May 8 '15 at 7:12
  • Is it possible to use nxlog in windows and forward the logs to linux syslog-ng server, as in my case its difficult to change the syslog-ng servers in linux. – Arun May 15 '15 at 5:14
  • Yes, you can. But what then? You may find that there is a pile of poorly structured log data. You may like to convert the format first to something that can be usefully flattened, such as JSON – Cameron Kerr May 15 '15 at 5:16
  • New to this logging environment and tools, hence lots of doubt. To be clear 1) In the input module of nxlog format/parse the logs to JSON. 2) In output module provide the syslog-ng server info 3) In Route forward the input to output. Correct me if I'm wrong Cameron – Arun May 15 '15 at 6:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.