Hello.
I like to configure "Winlogbeat" for filter my Event ID. I added below line to my config file:
- name: Security
event_id: 4663,4660
But when I want to start service then I got below error:
How can I solve it?
Thank you.
Hello.
I like to configure "Winlogbeat" for filter my Event ID. I added below line to my config file:
- name: Security
event_id: 4663,4660
But when I want to start service then I got below error:
How can I solve it?
Thank you.
Problem solved. It is sensitive to space and must be below of "name:".
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.