NXLOG is a universal log collector and forwarder supporting different platforms (BSD, Unix, Linux, Windows, Android), log sources and protocols (Syslog, Windows EventLog, Graylog2 GELF, XML, JSON, CSV and more). Learn more...

Latest news
  • More log rotation

    nxlog v1.4.712 has been released.
    The most notable addition in this release is a new extension module xm_fileop which adds support for file operations. This allows more sophisticated log rotation which can be used also for nxlog's own logs.
    See the full ChangeLog in the sources for the list of all enhancements and fixes included in this release.

  • Version 1.4.686 is available

    This release adds various stabilization fixes, some new module functions (including hostname() and file_name()) in im_file, and a working strptime() on Windows.

  • Graylog2 GELF support added

    I've added GELF output support to nxlog in version 1.4.624.
    Now with this enhancement it is possible to collect logs from several platforms and sources and to forward it to graylog2 in GELF format so that the structured data is preserved and is available for search and analytics. The most notable source is probably Windows EventLog (from XP to W7) as you were requesting this, but I should note that there is a lot more that you can do with it.
    See the docs for the details and usage.

    Here is an example of a Windows EventLog message in graylog2.

  • The first to support both XML and JSON

    XML and JSON is now supported as of version 1.4.615. nxlog can parse and generate both of these formats with the addition of two new extension modules: xm_json and xm_xml.
    nxlog is the first open source logging tool to support both of these formats for parsing and generation. This paves the way for structured logging over standard formats. Now it is possible to convert logs between even more formats with the addition of these two.

  • nxlog v1.4.607 released

    The documentation has been greatly enhanced. Some possible memory leaks and race conditions were fixed. The code can now be compiled with older APR 1.2. Group memberships are honored on Unix/Linux, and a regression in the im_file module has been fixed when using wildcards.

  • nxlog v1.4.571 released

    The code can now be compiled for Android. SNARE Syslog format support has been added for output. The im_mseventlog module can now produce output in UTF-8 and its error handling was enhanced to be more fault tolerant against the EventLog subsystem's failures. The im_mseventlog and im_msvistalog modules now set the AccountType and Category fields. A ReadFromLast configuration directive was added for the im_mseventlog and im_file modules

  • nxlog v1.4.539 released

    The newer IETF syslog standard (RFC 5424, 5425, 5426) is now fully supported. The I/O layer has been rewritten, which yields a 2-3x performance boost in some situations.

  • nxlog v1.2.494 released

    This release fixes a database reconnection issue in om_dbi which was affecting PostgreSQL. Syslog conversion now strips newlines from the message. A new module, im_msvistalog, was added to support reading all messages from Windows EventLog on Windows2008, Vista, and later.

  • nxlog v1.2.465 released

    This release fixes the service start in the Windows version when the executable was invoked directly, and adds a README file which is displayed at the end of the installation.

  • nxlog v1.2.461 released

    This release fixes the exec_async() call, which was generating zombies under some circumstances. Sample nxlog.conf files have been added.

  • Now available as Open Source

    We are happy to announce that we have released NXLOG under an open source license (GPL/LGPL) today. This includes thousands of lines of source code and several years of development work.
    Source code and binaries are available from the downloads section.
    Enjoy!