Skip to content

Commit

Permalink
Merge pull request #1816 from SEKOIA-IO/update/agent_config
Browse files Browse the repository at this point in the history
update indent in agent
  • Loading branch information
rombernier authored Jun 6, 2024
2 parents 2b9349c + a113e29 commit c6d7ab9
Show file tree
Hide file tree
Showing 2 changed files with 13 additions and 9 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ In the `Connections` panel, select the server then the desired site and go to th

Select the format `IIS` and the encoding `UTF-8` for the logs.

![screenshot12.png](/assets/operation_center/integration_catalog/application/microsoft-iis/screenshot11.png)
![screenshot12.png](/assets/operation_center/integration_catalog/application/microsoft-iis/screenshot12.png)

### NXLog directly to [Sekoia.io](http://sekoia.io/)

Expand Down
20 changes: 12 additions & 8 deletions docs/xdr/features/collect/integrations/endpoint/sekoiaio.md
Original file line number Diff line number Diff line change
Expand Up @@ -368,16 +368,20 @@ If you want to enable this feature, follow these steps:

For example, an intake key from the NGINX format is required for watching NGINX access logs.

If you want to collect multiple source files on the host, just add a new entry in the configuration. For instance:

```yaml
logfiles:
- filepath: /var/log/nginx/access.log # Path to the file to watch
intakekey: {intake_key_nginx} # Intake key to use to send the events
- filepath: /var/log/mysql/mysql.log
intakekey: {intake_key_mysql}
If you want to collect multiple source files on the host, just add a new entry in the configuration.
For instance:

```yaml
logfiles:
- filepath: /var/log/nginx/access.log # Path to the file to watch
intakekey: {intake key} # Intake key to use to send the events
- filepath: /var/log/mysql/mysql.log
intakekey: {intake key}
```

!!! WARNING
Your configuration file must be a valid YAML. An invalid file can prevent the agent from starting.

Once the configuration file is modified, restart the agent:

=== "Windows"
Expand Down

0 comments on commit c6d7ab9

Please sign in to comment.