As in filebeat there is an option to change file scan frequency. Can someone please let me know what is for winlogbeat ?
Is it "refresh_frequency:10m" or "rotate_every_kb: 10000" ?
My main concern is to know, in what conditions logs are being shipped to Master server via winlogbeat & filebeat.
Can anyone answer my above query, please
There isn't an equivalent setting for Winlogbeat. It checks for new events every 1s by using the event log API. When events are available it continues reading them as fast as it can until no more are available, then it returns to checking every 1s.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.