NXLog Platform - Telemetry Pipeline Management

What do you like best about the product?

Ease of use & Implementation
, Multi platform support, low latency, filtering capabilities.

What do you dislike about the product?

Community edition lacks support, difficulty in debugging log flow issues

What problems is the product solving and how is that benefiting you?

log collection across multiple platforms

What do you like best about the product?

Easy Pipelines with Nxlog.conf file entries

What do you dislike about the product?

Custom data tailoring on data events would require bit complex entries at Nxlog.conf file.

What problems is the product solving and how is that benefiting you?

Easy data ingestion and integration with SIEM

What do you like best about the product?

NXLog is powerful and easy to configure using a simple configuration file which can handle complex parsing and filtering. The agent is lightweight and consumes minimal system resources on endpoints and servers.

What do you dislike about the product?

There is a bit of a learning curve to begin using NXLog efficiently and requires some familiarity with log formats. The lack of a GUI and debugging can be cumbersome to those who are used to more verbose solutions.

What problems is the product solving and how is that benefiting you?

NXLog is helping us scale Windows Event log collection seamlessly, centralize log collection from multiple platforms, and reduce SIEM ingest via custom log parsing

What do you like best about the product?

What was very helpful, on Windows side, is that the configuration is a text file which is easy to set up, customize, deploy, manage and integrate across the infrastructure. Documentation is really great and clear. The software is usually a small footprint and runs without much fuss.

What do you dislike about the product?

Not everything is perfect on Windows side of things. For example, it's easy to install with GPO, but cannot be uninstalled via GPO. Also when you have an issue, it's sometimes difficult to find a solution. Their knowledge articles seem to be behind the paywall, or some of it.

What problems is the product solving and how is that benefiting you?

NXlog helps us centralize logs across different types of systems. Centralized logs are better for log management and security.

What do you like best about the product?

NXLog is a powerful parser and an easy to set up way of moving logs between devices. Basic implementation is very simple. We use it on servers to forward logs to our SIEM and it has worked wonderfully for years. The few times I've had to deal with support, they've been responsive, persistent, and tenacious.
The nxlog configs are very easy to set up and then ignore. I rarely have to edit it these days. Integrating it with my new siem was the last time I had to do any real work on it until a recent update broke some of my configs. Support was responsive and a new version was released the resolved our issue.

What do you dislike about the product?

While nxlog is easy to set up in a basic format, and very powerful, it takes time and effort to learn the ins and outs of the program and to build out exactly what you want. I guess, really, it's easy to learn, difficult to master.

What problems is the product solving and how is that benefiting you?

Forwarding logs from a wide variety of sources to our SIEM.