Nxlog Multiline Input to 1 Syslog Message

Posted by Eric on Server Fault See other posts from Server Fault or by Eric
Published on 2014-06-03T18:27:09Z Indexed on 2014/06/05 15:27 UTC
Read the original article Hit count: 296

Filed under:

syslog

|

nxlog

I am using nxlog to tail a custom log file on one of my Windows servers. Each entry in the text file looks similar to this.

===================================================================================================================
1/14/2014 3:08:48 PM DOMAIN\user1 adding group member...
    Domain: blah
    Group: TestGroup
    Member: CN=Joe Bob,CN=Users,DC=blah,DC=ARG,DC=com
1/14/2014 3:08:48 PM 1 member added.<br>
================================================================================================

I'm trying to send this log to my syslog server and I want to combine these multiple lines to 1 line so I can easily grep/search for specific users or groups. I've read some of the documentation on nxlog's website regarding multiline but haven't found a specific config to put them all in 1 entry with a syslog header.

Thanks, Eric

© Server Fault or respective owner

Related posts about syslog

WD MBWE II (White Strip Light) 2TB - unable to access data

as seen on Super User - Search for 'Super User'
I have a WD MBWE II (White Strip Light) 2TB - (WD20000H2NC-00) Was working fine until a few days ago. I guess there was a power failure and after that I am unable to access the 'Public' or the 'Download' folder anymore. I have been searching for answers everywhere but came up empty handed. Web… >>> More
Logs are written to *.log.1 instead of *.log

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
For some reason my log files are writing to the *.log.1 files instead of the *.log files, e.g. for my Postfix log files it is writing to /var/log/mail.log.1 and not /var/log/mail.log as expected. Same goes for mail.err. It looks like it's also doing it for auth.log and syslog. Here is a ls -lt snippet… >>> More
syslog-ng and nging logs to mysql

as seen on Server Fault - Search for 'Server Fault'
So couple of days ago I asked how to log php and nginx logs to centralized MySQL database, and m0ntassar gave a perfect answer :) cheer ! The problem I am facing now is that I can not seem to get it working. syslog-ng version: # syslog-ng --version syslog-ng 3.2.5 This is my nginx log format: log_format… >>> More
Python - retrieving info from a syslog file

as seen on Stack Overflow - Search for 'Stack Overflow'
Ive been asked to do a program using python for an assignment. Ive been given a syslog file and I have to find things out about it How do I find out how many attempts were made to login to the root account? Any advice would be highly appreciated as Im very new to python an completely lost! >>> More
How can i monitor syslog messages in c# console app with TCP

as seen on Stack Overflow - Search for 'Stack Overflow'
Heya, In my application, i need to monitor all messages sent by syslog. I've tried with UDP, but after one message, i didn't respond anymore (no error, just no heads up anymore). And setting up a tcp server isn't really the solution either i think. Can anyone guide me to a solution where i can log… >>> More

Related posts about nxlog

Nxlog Multiline Input to 1 Syslog Message

as seen on Server Fault - Search for 'Server Fault'
I am using nxlog to tail a custom log file on one of my Windows servers. Each entry in the text file looks similar to this. =================================================================================================================== 1/14/2014 3:08:48 PM DOMAIN\user1 adding group member... … >>> More
Query specific logs from event log using nxlog

as seen on Server Fault - Search for 'Server Fault'
Below is my nxlog configuration define ROOT C:\Program Files (x86)\nxlog Moduledir %ROOT%\modules CacheDir %ROOT%\data Pidfile %ROOT%\data\nxlog.pid SpoolDir %ROOT%\data LogFile %ROOT%\data\nxlog.log <Extension json> Module xm_json </Extension> <Input internal> … >>> More
Optimizing a bin-placement algorithm

as seen on Stack Overflow - Search for 'Stack Overflow'
Alright, I've got two collections, and I need to place elements from collection1 into the bins (elements) of collection2, based on whether their value falls within a given bin's range. For a concrete example, assume I have a sorted collection objects (bins) which have an int range ([1...4], [5..10]… >>> More