Change file scan frequency in Winlogbeat

Elastic Stack Beats
1

As in filebeat there is an option to change file scan frequency. Can someone please let me know what is for winlogbeat ?

Is it "refresh_frequency:10m" or "rotate_every_kb: 10000" ?
https://www.elastic.co/guide/en/beats/winlogbeat/current/file-output.html

My main concern is to know, in what conditions logs are being shipped to Master server via winlogbeat & filebeat.

2

Can anyone answer my above query, please

3

There isn't an equivalent setting for Winlogbeat. It checks for new events every 1s by using the event log API. When events are available it continues reading them as fast as it can until no more are available, then it returns to checking every 1s.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.