Best way to parse the KV values in logs coming from winlog beat

Elastic Stack Logstash
1

Hi experts,

My windows event logs are coming through win log beat and have some key value pairs when i see the xml format of the logs. Is there a way i can parse these fields as key value pairs?

2

You need to use Logstash to break things apart and extract the KVs.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.