# Config not working, Injecting all logs

**URL:** <https://discuss.elastic.co/t/config-not-working-injecting-all-logs/214714>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 11, 2020, 10:18pm UTC](https://discuss.elastic.co/t/config-not-working-injecting-all-logs/214714 "2020-01-11T22:18:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![GuessMyName](https://avatars.discourse-cdn.com/v4/letter/g/4bbf92/32.png) [@GuessMyName](https://discuss.elastic.co/u/GuessMyName)\
**Post date:** [January 11, 2020, 10:18pm UTC](https://discuss.elastic.co/t/config-not-working-injecting-all-logs/214714/1 "2020-01-11T22:18:01Z")

</div>

Hi Guys,

For some reason... Winlogbeat is grabbing all security logs not just the one listed below, any idea what I'm missing ?, Running 7.5.1

Thx!

```
 winlogbeat.event_logs:

```

- name: Security  
processors:
  - drop\_event.when.not.or:
    - equals.winlog.event\_id: 4754
    - equals.winlog.event\_id: 4755
    - equals.winlog.event\_id: 4757
    - equals.winlog.event\_id: 4758
    - equals.winlog.event\_id: 4764
    - equals.winlog.event\_id: 4740
    - equals.winlog.event\_id: 4728
    - equals.winlog.event\_id: 4732
    - equals.winlog.event\_id: 4756
    - equals.winlog.event\_id: 4735
    - equals.winlog.event\_id: 4724
    - equals.winlog.event\_id: 4625
    - equals.winlog.event\_id: 4648
    - equals.winlog.event\_id: 1102
    - equals.winlog.event\_id: 4624
    - equals.winlog.event\_id: 5038
    - equals.winlog.event\_id: 6281
    - equals.winlog.event\_id: 4727
    - equals.winlog.event\_id: 4729
    - equals.winlog.event\_id: 4730
    - equals.winlog.event\_id: 4731
    - equals.winlog.event\_id: 4733
    - equals.winlog.event\_id: 4734
    - equals.winlog.event\_id: 4737  
#ignore\_older: 72h

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 8, 2020, 10:18pm UTC](https://discuss.elastic.co/t/config-not-working-injecting-all-logs/214714/2 "2020-02-08T22:18:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.