# Can ELK monitor registry values

**URL:** <https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870>\
**Category:** Beats\
**Created:** [June 12, 2020, 10:33am UTC](https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870 "2020-06-12T10:33:12Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ayesha](https://avatars.discourse-cdn.com/v4/letter/a/c0e974/32.png) [@Ayesha](https://discuss.elastic.co/u/Ayesha)\
**Post date:** [June 12, 2020, 10:33am UTC](https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870/1 "2020-06-12T10:33:12Z")

</div>

Hi

I want to know is there a way ELK can monitor security configurations like check registry value every 24 hours and if it is changed then alert?  
Like compare security configurations to a baseline every few hours?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 15, 2020, 11:21pm UTC](https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870/2 "2020-06-15T23:21:09Z")

</div>

Do you mean the Windows registry?

---

<div class="post-metadata">

**Author:** ![Ayesha](https://avatars.discourse-cdn.com/v4/letter/a/c0e974/32.png) [@Ayesha](https://discuss.elastic.co/u/Ayesha)\
**Post date:** [June 16, 2020, 12:55am UTC](https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870/3 "2020-06-16T00:55:01Z")

</div>

> [@Ayesha](#):
>
> Like compare security configurations to a baseline e

Yes I mean windows registry.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 16, 2020, 12:57am UTC](https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870/4 "2020-06-16T00:57:55Z")

</div>

Not at this stage. I can't see anything as a feature request, so it might be worth [creating one](https://github.com/elastic/beats/issues)?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 14, 2020, 2:57am UTC](https://discuss.elastic.co/t/can-elk-monitor-registry-values/236870/5 "2020-07-14T02:57:57Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.