<p class="shortdesc">本文以64位Windows主机为例，介绍系统如何通过Agent对Windows主机进行性能监控、收集资产上的文本型日志。其中，安全日志审计的IP地址为10.20.90.46，Windows主机资产的IP地址为10.20.90.184。对于Windows XP与Windows Server2003系统的主机资产，请提交<a class="xref" href="https://www.ocftcloud.com/console/workorder/create" target="_blank" rel="external noopener">工单</a>联系技术人员。</p> <section><div class="tasklabel"><h2 class="doc-tairway">操作步骤</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">请提交<a class="xref" href="https://www.ocftcloud.com/console/workorder/create" target="_blank" rel="external noopener">工单</a>联系技术人员获取nxlog-ce的安装文件WINDOWS-nxlog.zip。</span> </li><li class="li step stepexpand"> <span class="ph cmd">将WINDOWS-nxlog.zip安装包上传到Windows主机并解压，解压后获得以下两个文件：</span> <div class="itemgroup info"> <img class="image" id="dc_logaudit_cfg_0198__image_pkf_zz5_ssv" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-19a368259447.png" width="800"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">以系统管理员的身份登录Windows主机，双击运行nxlog-ce-2.10.2150.msi文件，按照提示进行默认安装。</span> <div class="itemgroup info"> <p class="p">安装过程如下：</p> <img class="image" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-131c9bb29cb7.png" width="500"> <img class="image" id="dc_logaudit_cfg_0198__image_idp_fdw_ssb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-1d17247c9022.png" width="500"> <img class="image" id="dc_logaudit_cfg_0198__image_jn2_jdw_ssb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-143608af9412.png" width="500"> <img class="image" id="dc_logaudit_cfg_0198__image_jm5_jdw_ssb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-1b5df6d69c5b.png" width="500"> <img class="image" id="dc_logaudit_cfg_0198__image_xf2_kdw_ssb" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-1ed275a192a3.png" width="500"> <div class="note note note_note" id="dc_logaudit_cfg_0198__note_mst_ndw_ssb"><span class="note__title">说明：</span> 安装成功后，会以服务形式注册到服务列表中。在64位Windows操作系统中，nxlog安装目录为C:\Program Files (x86)\nxlog。</div> </div> </li><li class="li step stepexpand"> <span class="ph cmd">在C:\Program Files (x86)\nxlog\conf目录下，将nxlog-ce安装完成产生的nxlog.conf文件删除或者重命名为nxlog.conf_default，用原先解压出来的nxlog.conf配置文件替换该目录下的nxlog.conf。</span> <div class="itemgroup info"> <img class="image" src="https://obs-cn-shanghai.ocftcloud.com/pacloud/20222803112055-150424e293d7.png" width="500"> </div> </li></ol></section> <section class="section postreq" id="dc_logaudit_cfg_0198__postreq_lcj_2fw_ssb"><div class="tasklabel"><h2 class="doc-tairway">后续操作</h2></div> <p class="p">nxlog-ce安装成功后，您需要继续完成以下步骤：</p> <ul class="ul" id="dc_logaudit_cfg_0198__ul_nm4_4t5_ssb"> <li class="li"><a class="xref" href="https://www.ocftcloud.com/ssr/help/security/LogAudit/quickstart.addAsset.WindowsDevice.configWin" target="_blank" rel="external noopener">步骤二：修改配置文件</a></li> <li class="li"><a class="xref" href="https://www.ocftcloud.com/ssr/help/security/LogAudit/quickstart.addAsset.WindowsDevice.addWin" target="_blank" rel="external noopener">步骤三：将Windows服务器添加为资产</a></li> <li class="li"><a class="xref" href="https://www.ocftcloud.com/ssr/help/security/LogAudit/quickstart.addAsset.WindowsDevice.resultWin" target="_blank" rel="external noopener">步骤四：验证资产是否添加成功</a></li> </ul> </section>