define ROOT C:\Program Files (x86)\nxlog

Moduledir	%ROOT%\modules
CacheDir	%ROOT%\data
Pidfile		%ROOT%\data\nxlog.pid
SpoolDir	%ROOT%\data
LogFile		%ROOT%\data\nxlog.log

LogLevel		INFO
SuppressRepeatingLogs	FALSE
NoCache			FALSE
#FlowControl		TRUE
#IgnoreErrors		TRUE
#Panic			SOFT

<Extension syslog>
	Module	xm_syslog
</Extension>

<Input in>
	Module			im_file
	File			'C:\inetpub\logs\LogFiles\\*.log'
	SavePos			TRUE
	ReadFromLast		TRUE
	Recursive		TRUE
	FlowControl		TRUE
	InputType		LineBased
	Exec			$SourceName = 'IIS';						\
				if $raw_event =~ /\b192\.168\.55\.[12]\b/			\
					drop();							\
				else								\
				{								\
					$Message = $raw_event;					\
					$SyslogFacilityValue = syslog_facility_value('local5');	\
				}
</Input>

<Processor buffer>
    Module		pm_buffer
    MaxSize		2048000
    Type		Disk
    WarnLimit		2000000
</Processor>

<Output out>
	Module		om_tcp
	Host		192.168.54.9
	Port		514
	Exec		to_syslog_ietf();
	OutputType	Syslog_TLS
</Output>

<Route>
	Path	in => buffer => out
</Route>