Input Modules

Input modules are responsible for collecting event log data from various sources.

Each module provides a set of fields for each log message, these are documented in the corresponding sections below. The NXLog core creates a set of core fields which are available to each module.

Each NXLog module on Windows can create multiple TCP connections on using ephemeral ports. This happens when the module needs to monitor files or sockets and should be considered part of the normal network resources.