2nd Winlogbeat not showing up

rfs42 · March 30, 2018, 7:05pm

I've got 2 winlogbeats configured identically with

xpack.monitoring.enabled: true
xpack.monitoring.elasticsearch:

Both are successfully sending logs to elasticsearch. A quantity of 2 winlogbeats shows up in Monitoring but only one appears in the list. See the screen shot below.

Why isn't the other instance showing up? Your help appreciated.

pickypg · March 30, 2018, 8:11pm

This was an unfortunate shortcoming with how Winlogbeat was built, which prevented it from marking its ephemeral ID (UUID per startup). There is a fix incoming for it in 6.2.4 and 6.3.0.

Hope that helps,
Chris

rfs42 · March 31, 2018, 4:04pm

Thanks for the quick response

system · April 28, 2018, 4:04pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.