Can't filter with winlogbeat.event_id on kibana

[proxx]

Can't filter with winlogbeat.event_id on kibana.

Have restarted my winlogbeat service on my windowss server 2012 and also my ELK server.

Any way out pls.

[rashmi (kulkarni)]

What is the error in the logs when you restart winlogbeat ? Would you mind sharing more information - like logs, version, steps to reproduce etc ?

Thanks
Rashmi

[proxx]

I'm using a ELK 7.1.1 and winglogbeat 7.1.1.

Logs.

[proxx]

So finally got the solution

I delete the indices for winlogbeat in elasticsearch

curl -XDELETE http://localhost:9200/winlogbeat*

[rashmi (kulkarni)]

Glad it worked after deleting the indices..
Thanks for posting your solution...