Beat - logstash - logserver

Can I configure logstash as a receiver from winlogbeat and send these logs in CEF format to another log server? If yes. How should I do that?

You can use a cef codec on whatever output you are using to send data to the other server.

Can you show me an example configuration file using the cef codec for windows events.

I do not have an example.

Can anyone show me an example of sending Windows events in CEF format using logstash?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.