Filebeat module for SharePoint


There is now this new concept of using ingest pipelines instead of Logstash pipelines, but the Filebeat would be fantastic, if there was a module for SharePoint ULS logs. There a quite a few farms out there, which would benefit from it.
Do you think it might be possible for you to create such a module? There is this as a proof of concept, but it is using Logstash.

would it be easy if you send "un-altered" ULS data using file-beat to logstash and then do the module in logstash?

sharepoint => filebeat (unaltered dataset) => logstash (modules present) => elasticsearch

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.