I have doubt i have to take logs from one windows machine main criteria is I want a log that has information URL Access and use drive access and print access
for that i want use which types of beat either winlogbeat is enough or filebeat
i have used winlogbeat but it gives only the information about booting and os information
but i need the logs of those?
what can i do?
i one scenario we have 100 client and it has beat from that client we take the log and send it to only one logstash on a server machine doing this the network gets slow it send huge logs for that we can take the specific log from the machine using beat?
there is any idea about it?