2nd Winlogbeat not showing up

I've got 2 winlogbeats configured identically with

  • xpack.monitoring.enabled: true

  • xpack.monitoring.elasticsearch:

    Both are successfully sending logs to elasticsearch. A quantity of 2 winlogbeats shows up in Monitoring but only one appears in the list. See the screen shot below.

Why isn't the other instance showing up? Your help appreciated.

Hi @rfs42,

This was an unfortunate shortcoming with how Winlogbeat was built, which prevented it from marking its ephemeral ID (UUID per startup). There is a fix incoming for it in 6.2.4 and 6.3.0.

Hope that helps,
Chris

Thanks for the quick response

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.