ElasticSearch IIS time-taken Field is Missing

Elastic Stack Elastic Agent
1

My ELK Version 8.3 (Elasticsearch, Kibana, ElasticAgent, Beats....)

  1. ElasticAgent installed my Server Host (Complete)

  2. ALL IIS LogField Enabled

  3. Data collection was successful

  4. But.... Just 1 Field(Time-Taken) does not exist Discovery. Here is My LogData Sample
    (Event.Duration Field is not exist)

  5. Therefore..... Using FileBeat -> IIS Module Enabled -> time-taken(duration) log Collect Success

ElasticAgent Is this impossible?

2

Same problem.

3

Just from update to Integration IIS Version 1.0.0.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.