Versions Compared

Version Old Version 1 New Version 2
Changes made by

Aparna Rr

Aparna Rr

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Download and install the NXLog agent from the following location: https://nxlog.co/products/nxlog-community-edition/download.

  2. Navigate to services.msc and stop the nxlog service.

  3. Go to the folder C:\Program Files\nxlog\data and delete the file configcache.dat if it is present.

  4. Navigate to the installed location C:\Program Files\nxlog\conf. Rename the attached NXLog_SQL.conf (

    View file
    nameNXLog_SQL.conf
    ) file to nxlog.conf and copy it into this folder.

  5. System Provider is different with respect to each customer configuration. System provider value should be mentioned as per customer configuration in nxlog.conf file in line 42/43.

  6. Please also provide the same System Provider Value into Syslog Signature while onboarding this device.

  7. Replace the placeholder CyberHub IP with the actual CyberHub IP Address in the nxlog.conf file.

  8. Copy the certificate which you obtained from Adaptive MxDR team to windows machine where nxlog agent is installed and mention this cert path in nxlog.conf against CAFile at line number 73.

  9. Now, start the nxlog service from services.msc.

  10. NXLog agent logs will be available at the location C:\Program Files\nxlog\data\nxlog.log.

  11. The log flow should work, and you can check it using tcpdump with the command tcpdump -AA port 100146514.

As mentioned in pt. 5 and 6, please make sure to provide System Provider value in NXLOG.conf file in line 42 and also use the same value in syslog signature while onboarding this device.

...