Hello team, I am trying to forward logs from log event channels on

windows

which is under the following path :

Applications and Services Logs -> MyCompany -> SUB -> Monitor -> Operational

I tried both winlog and winevtlog plugins but I am unable to forward these logs, but other channels such as Security are flowing as expected. Config :

[INPUT]
    Name winevtlog
    Tag  windows-mycompany-sub-monitor
    DB   C:\Program Files\New Relic\newrelic-infra\newrelic-integrations\logging\fb.db
    Channels MyCompany/SUB/Monitor/Operational

[FILTER]
    Name  record_modifier
    Match windows-mycompany-sub-monitor
    Record "fb.input" "winlog"

[FILTER]
    Name  lua
    Match windows-mycompany-sub-monitor
    script C:\Windows\SystemTemp\nr_fb_lua_filter2456764623
    call eventIdFilter

[FILTER]
    Name  modify
    Match windows-mycompany-sub-monitor
    Rename EventType WinEventType
    Rename Message message

What exactly are you seeing? Any errors in the logs? Removing all the filters and just using stdout shows what? How are you running/etc. in case its a permissions or similar issue? Are you on latest version?