NXLOG is used to process the collected information and send it on to the OTM CCE.
Login on MS Exchange server
Download the latest version of nxlog. It is easiest to choose the Windows msi file which includes an installer.
http://nxlog.org/products/nxlog-community-edition/download
Open the Nxlog configuration file at:
C:\Program Files (x86)\nxlog\conf\nxlog.conf
Replace the entire configuration file by pasting the following Below – Note to replace the variable ({IP address of Seceon Server}) with the actual Seceon Server IP address:
## This is a sample configuration file. See the nxlog reference manual about the
## configuration options. It should be installed locally and is also available
## online at http://nxlog.org/nxlog-docs/en/nxlog-reference-manual.html
...
<Extension syslog>
Module xm_syslog
</Extension>
define BASEDIR CBASEDIR C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTrackingC:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\MessageTracking
<Input in_exchange>
Module im_file
File '%BASEDIR%\MSGTRK*-*.LOG'
SavePos TRUE
Exec if $raw_event =~ /HealthMailbox/ drop();
Exec if $raw_event =~ /^#/ drop();
</Input>
<Output out_exchange>
Module om_udp
Host 137.125.242.105
Port 514
Exec $SyslogFacilityValue = 2;
Exec $SourceName = 'exchange_msgtrk_log_V14';
Exec to_syslog_bsd();
</Output>
...