Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Download and install the NXLog Windows agent from the following location: https://nxlog.co/products/nxlog-community-edition/download.

  2. Navigate to services.msc and stop the nxlog service.

  3. Navigate to the folder C:\Program Files\nxlog\data and delete the file configcache.dat if it present.

  4. Rename the attached

    View file
    nameNxlog_MS-IIS_TCP.conf
    file to nxlog.conf and copy into C:\Program Files\nxlog\conf. folder.

  5. Replace the placeholder CyberHub IP with the actual CyberHub IP in the nxlog.conf file.

  6. Copy the previously created certificate file on Windows machine where nxlog agent is installed and mentioned this cert path in nxlog.conf against "CAFile" on line number 45 & 65.

  7. Now, start the NxLog service from services.msc.

  8. NXLog agent logs will be available at the location C:\Program Files\nxlog\data\nxlog.log.

  9. The log flow should work, and you can check it using tcpdump with the command tcpdump -AA port 10014

...