# Elastic Agent - Ship Windows logs for SIEM

**URL:** <https://discuss.elastic.co/t/elastic-agent-ship-windows-logs-for-siem/356751>\
**Category:** SIEM\
**Created:** [April 4, 2024, 9:03am UTC](https://discuss.elastic.co/t/elastic-agent-ship-windows-logs-for-siem/356751 "2024-04-04T09:03:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![The\_BlueishSky](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/the_blueishsky/32/45166_2.png) [@The\_BlueishSky](https://discuss.elastic.co/u/The_BlueishSky)\
**Post date:** [April 4, 2024, 9:03am UTC](https://discuss.elastic.co/t/elastic-agent-ship-windows-logs-for-siem/356751/1 "2024-04-04T09:03:05Z")

</div>

We are in the process of deploying ELASTIC AGENT on all CLIENT OS , We intend to capture Windows Event logs more focused on Security Events which would be used for our SIEM. Any standard filters that can be applied and events that are unwanted can be ignored? Any standard SIEM thumb rule while capturing windows event logs

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2024, 9:03am UTC](https://discuss.elastic.co/t/elastic-agent-ship-windows-logs-for-siem/356751/2 "2024-05-02T09:03:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.