Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents

...

        C:\Program Files (x86)\nxlog\conf\nxlog.conf

4. Replace the entire configuration file by pasting the following Below – Note to replace the variable ({IP address of Seceon Server}) with the actual Seceon Server IP address:

define ROOT C:\Program Files (x86)\nxlog

Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log

...

  1. Open IIS Manager, which can be accessed from the Tools menu in the Server Manager or from Administrative Tools.

  2. In the Connections, the pane on the left, select the server or site for which to configure logging. Select a server to configure logging server-wide, or a site to configure logging for that specific site.

  3. Double-click the Logging icon in the centre pane.

...


4. Modify the logging configuration as required. The W3C format is recommended.

...

The resulting logs can be collected by NXLog as shown in the following sections.

Verification

Verification steps on Windows server using NXLOG Utility

When issues arise while configuring or maintaining an NXLog instance, a stepwise troubleshooting approach (moving from the most likely and simple cases to the more complex and rare ones) generally yields favourable results. The first step is always to inspect the internal log which NXLog generates.

By default, NXLog generates log messages about its own operations. These messages are essential for troubleshooting problems and should be checked first if NXLog is not functioning as expected.

These internal messages are written to the file defined in the LogFile directive in nxlog.conf. On Windows that file is C:\Program Files\nxlog\data\nxlog.log; on Linux, /opt/nxlog/var/log/nxlog/nxlog.log.

If this directive is not specified, internal logging is disabled.

Verification steps on Seceon devices end

This Can validate the success of configuration either on Seceon UI or on the CCE server.

  • Verification through the Seceon UI

    • Open Seceon UI >>Systems >> Dropdown systems and go inside logs and flows collection status.

    • Under the Source device IP address section the device configured will reflect.

...