# NXLog configuration for converting and sending Windows logs to Logsign SIEM
# Both Community and Enterprise Editions of NXLog are supported.
define ROOT C:\Program Files (x86)\nxlog
Moduledir %ROOT%\modules
CacheDir %ROOT%\data
Pidfile %ROOT%\data\nxlog.pid
SpoolDir %ROOT%\data
LogFile %ROOT%\data\nxlog.log
Module xm_json
# For windows 2008/vista/7/8/2012/2012R2 and latter use the following:
Module im_msvistalog
ReadFromLast TRUE
SavePos TRUE
Query \
\
\
\
\
\
Exec to_json();
Path in_eventlog => out_eventlog