Combine windows registry and log file

Elastic Stack Logstash
1

In my windows computer, i am using filebeat to read the content of the application server logs. On the same machine, In the registry field i have also store the version of the application. I want to combine these two data on the same index

First off all is it possible to read a specific registry field content with filebeat or another tool like filebeat?

Then, is it possible to combine this two different data on the same index?

Thank you

2

Welcome to our community! :smiley:

There's no native way to read the registry with the Elastic Stack that I am aware of. You might need to write a script to pull the info into a file, then parse it from there.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.