2nd Winlogbeat not showing up

Elastic Stack Beats
,
1

I've got 2 winlogbeats configured identically with

  • xpack.monitoring.enabled: true

  • xpack.monitoring.elasticsearch:

    Both are successfully sending logs to elasticsearch. A quantity of 2 winlogbeats shows up in Monitoring but only one appears in the list. See the screen shot below.

Why isn't the other instance showing up? Your help appreciated.

image
image.png1043×530 33.1 KB

2

Hi @rfs42,

This was an unfortunate shortcoming with how Winlogbeat was built, which prevented it from marking its ephemeral ID (UUID per startup). There is a fix incoming for it in 6.2.4 and 6.3.0.

Hope that helps,
Chris

3

Thanks for the quick response