Can Filebeat ship the below type of log files? Or WInlogbeat?

I read that Winlogbeat is a Windows specific log-shipper but I have installed FIlebeat to ship log files from server to linux system with ELK. Can filebeat actually ship these log type files properly? Or is Winlogbeat better?

2020-03-04 02:36:21,595 [DispatcherScheduler_Worker-1] INFO   o.a.c.h.HttpMethodDirector - I/O exception ( caught when processing request: Connection timed out: connect  DispatcherApp\logs\dispatcher.log
2020-03-03 11:56:34,536 [Thread-40]             INFO   c.e.d.a.AdapterFactory - stopAdapter; adapterName=fdsadapterRecoveryForVendor4  DispatcherApp\logs\dispatcher-adapter.log
2020-03-04 00:00:10,285 [QuartzScheduler_DispatcherScheduler-NON_CLUSTERED_MisfireHandler] DEBUG  o.q.i.j.JobStoreTX - MisfireHandler: scanning for misfires...  quartz.log
2020-03-04 00:19:05,077 INFO  [qtp1763490167-36611] c.e.r.dal.jpa.SessionRegistryDalJpa - logout; C04FFA20E0A6387E831C; userName=null; sessionHashToLogout=null; service=null; clientIp=null; logoutType=appRestarted; childApplicationName=DA; logoutAction=LOGOUT_APP_KEY;ticketToLogout=null; appKeyForAppRestartLogout=DA; tagToLogout=internal;  RBACService\logs\rbac.log
2020-03-04 11:02:12,013 DEBUG [qtp1161247752-524] - login; sessionUsername=null; renew=false; service=https://DataEdge:28443/client/j_spring_cas_security_check; sessionHash=7b801e6617a7021950900920405a977e81ecb56ada4d0dd3a205f5c83178369e;
2020-03-04 11:02:12,481 ERROR [qtp1161247752-455] ssoErrorJsp.jsp - request=/sso/a/css/esq.css; ip=; exception=null; exceptionStack=null; status=404;


as long as the filebeat configuration meets your needs to deliver logs, you're good to go. Winlogbeat is useful when you want to dive deeper into windows event (e.g. logged by services).

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.