Get Filezilla Server logs

431 views
Skip to first unread message

Daniel D'Angeli

unread,
Jan 21, 2022, 7:04:12 AM1/21/22
to Wazuh mailing list
Hi,

i have a FileZilla Server on Windows Server which writes logs to the C:\Program Files (x86)\FileZilla Server\Logs.

I want to keep the option to create a new log every day instead of writing all into a single one.

How do i get every file that ends in .log in that folder with the agent?

Regards,
Daniel D.

victor....@wazuh.com

unread,
Jan 21, 2022, 7:20:17 AM1/21/22
to Wazuh mailing list

Hello Daniel D.,
You can use wildcards in the location option:

In your case, something like this will do the work:

<localfile>
    <location>C:\Program Files (x86)\FileZilla Server\Logs\*.log</location>
    <log_format>syslog</log_format>
</localfile>

If you have any doubt do not hesitate to ask.

Daniel D'Angeli

unread,
Jan 21, 2022, 7:28:30 AM1/21/22
to Wazuh mailing list

Hi,

 i used the eventchannel format and I see this error now.

 ERROR: Could not EvtSubscribe() for (C:\Program Files (x86)\FileZilla Server\Logs\FileZilla Server.log) which returned (15000)

 Do I have to use the syslog format?

 Regards,

Daniel D.

victor....@wazuh.com

unread,
Jan 24, 2022, 4:55:11 AM1/24/22
to Wazuh mailing list

Eventchannel only allows the following location values. I recommend you this documentation page about how to collect windows logs (eventchannel and eventlog format)

In your case, the syslog format will do the work.
If you have any trouble do not hesitate to ask.

Reply all
Reply to author
Forward
0 new messages