Build Winlobeat deb file

Elastic Stack Beats
1

I know the request is odd but i want to distribute winlogbeat inside a docker container that runs debian. I plan then (through configs and volumes) to read from the host windows machine.

Is there any way i can build a winlogbeat deb to distribute inside my docker container?

2

Winlogbeat is built for Windows only, so a deb doesn't really make sense.

3

I understand, but if you check my use case above it would make sense. I want to bundle it on an existing docker container that already has other things and runs on debian.

Is it possible? I dont see why not since its all based on libbeat

4

I get you, but winglogbeat needs to be installed on the host. It can't read a remote host from wherever it is installed, as it needs to pull from the local windows event log.

5

Ok in that case i guess no way around. any plans of improving that in the future? all other beats can be ran dockerized just winlogbeat not... would be good to make it work on docker.

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.