> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# NXLog CE for Windows Hosts

If you want to collect and forward Microsoft Windows events that are not supported by the [Windows Event Collector sensor app](windows-event-collector-app) or other types of non-Windows application events from a Windows host, you can install and configure NXLog Community Edition (CE) and customize your configuration file for integration with USM Anywhere. You can choose to set up NXLog on each Windows host to forward events directly to the USM Anywhere Sensor, or use a forwarding server as a central collection point.

The Windows NXLog plugin provided by USM Anywhere translates the raw log data into <Tooltip tip="Normalization describes the translation of log file entries received from disparate types of monitored assets into the standardized framework of Event types and sub-types.">normalized events</Tooltip> for analysis. This plugin automatically processes all messages forwarded to the USM Anywhere Sensor where the syslog tag matches the value eventlog.

You can choose to forward your NXLogs in one of two ways:

* [Forward NXLog Messages Directly to a USM Anywhere Sensor](nxlog-direct-forward)
* [Use Windows Server as an NXLog Collector](nxlog-windows-server-collector)

<Note>
  **Note:** See this [Windows expert's guidance](https://kevinholman.com/2011/08/02/how-to-test-fire-any-windows-event-on-any-server-from-any-application/) for more useful information about testing and debugging Windows events.
</Note>