I am enrolling my Windows servers in Fleet on ELK 7.12. I can see lots of 'logs-* via discover relating to these servers.
Do I need to manually install winlogbeat and or filebeat in addition to what I already have. My current integration has 'Endpoint Security' and 'System'
Do I also need winlogbeat if I already have filebeat. Apologies for the confusion here.
For example lets say I am going to add a Windows DC. I am interested in view logs about lockouts, logon failures etc.
Do I just deploy the Fleet Agent or do I deploy the fleet agent, then install filebeat and then install winlogbeat?