NXLog is a multi-platform log collector/forwarder that speaks a long list of formats: Windows Event Log, file, IIS, ETW, GELF, Syslog, JSON, BSM, etc. The Community Edition is free; Enterprise Edition adds advanced modules.

It commonly sits between Windows endpoints and a SIEM in environments where the SIEM does not have a native Windows agent.

• Forwarding Windows Event Log to a Syslog/ELK SIEM
• Centralising IIS/AD logs without paying for a heavy agent
• Normalising heterogeneous formats before SIEM ingestion