# Beatsで収集したログを日次指定してlogstashに送信するには

**URL:** <https://discuss.elastic.co/t/beats-logstash/297841>\
**Category:** 日本語による質問・議論はこちら\
**Created:** [February 22, 2022, 5:44am UTC](https://discuss.elastic.co/t/beats-logstash/297841 "2022-02-22T05:44:31Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![Tomo\_M](https://avatars.discourse-cdn.com/v4/letter/t/848f3c/32.png) [@Tomo\_M](https://discuss.elastic.co/u/Tomo_M)\
**Post date:** [February 23, 2022, 12:19pm UTC](https://discuss.elastic.co/t/beats-logstash/297841/4 "2022-02-23T12:19:38Z")

</div>

> [@Winlogbeat Working](https://discuss.elastic.co/t/winlogbeat-working/163379):
>
> Hi All, How does winlogbeat works exactly, in short? Like what parameters or depending on what conditions or in any specific intervals, data is shipped from client to ELK server? As in filebeat, there is scan\_frequency which is one of the conditions to ship to data. Thank You

> [@Change file scan frequency in Winlogbeat](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950):
>
> As in filebeat there is an option to change file scan frequency. Can someone please let me know what is for winlogbeat ? Is it "refresh\_frequency:10m" or "rotate\_every\_kb: 10000" ? [https://www.elastic.co/guide/en/beats/winlogbeat/current/file-output.html](https://www.elastic.co/guide/en/beats/winlogbeat/current/file-output.html) My main concern is to know, in what conditions logs are being shipped to Master server via winlogbeat & filebeat.

winlogbeatの場合、inputについては自動的に1秒ごとにWindow Event log APIにアクセスするようです。

outputについては、filebeatにflush.min\_events/flush.timeoutという項目があり、

> **[Configure the internal queue | Filebeat Reference \[8.0\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/8.0/configuring-internal-queue.html#_flush_timeout)**

同様の項目をwinlogbeat.ymlでも設定できるようなので、そちらで設定できるかもしれません。日時指定は難しそうです。

> **[winlogbeat.reference.yml | Winlogbeat Reference \[8.11\] | Elastic](https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-reference-yml.html)**

---

_[View the full topic](https://discuss.elastic.co/t/beats-logstash/297841)._