FreeBSD log sources

BSM Auditing Collect Basic Security Mode audit logs directly from the kernel.

DNS Monitoring Collect BIND 9 DNS Server logs via syslog or from a file.

File Integrity Monitoring Monitor file and directory changes with NXLog Agent.

Kernel Logs Collect boot messages, driver information, kernel status, and other kernel-related log events.

Log Files Collect file-based logs in any format, such as JSON, XML, and CSV, and parse them with one of the specialized extensions.

Network Packet Capture Collect and parse network traffic by capturing packets from a network interface or a file.

Process Accounting Logs Monitor executed commands and process activity on Unix/Linux operating systems.

System logs Replace the syslog daemon with NXLog Agent, receive logs via a Unix domain socket, or collect system logs from a file.

Windows Event Forwarding Set up a Windows Event Collector (WEC) and receive logs from WEF clients.