Hello there, I have installed ELKwin from https://www.itefix.net/elkwin - very nice solution to get the ELK-Stack running in seconds. If I'm honest, I am very new to the ELK-Stack and it is not so easy to start... On the ELK-server I collect all the Windows event logs from all other Windows-Server…

Event messages are splitted in event_data.param xy? How to fix that?

system (system) Closed October 28, 2016, 4:21pm 6

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Generically named event_data.paramN on Windows XP and 2003 Beats winlogbeat	7	2502	April 12, 2016
Message filed is missing when Winlogbeat is used Beats winlogbeat	12	2568	October 10, 2017
Split "event_data" to only show the original data field Logstash	3	1610	April 13, 2017
Pulling details of an event entry with Winlogbeat Beats winlogbeat	6	2291	April 12, 2016
Event_data.param# instead of the correct fields Beats winlogbeat	6	1384	October 4, 2018