Help constructing yaml file

Elastic Stack Beats
,
1

Hello, I'm trying to monitor Windows events (security only) and DHCP event logs (files). The first part works well; logs are collected and shipped, and it has been running for 3 months. I now want to add file logging for DHCP. The log files are located in the paths %windir%\System32\DHCP\DhcpSrvLog-*.log.

However, when I add the following configuration:

filebeat.inputs:

  • type: log
    enabled: true
    paths:
    • %windir%\System32\DHCP\DhcpSrvLog-*.log
      The service fails to start, and I'm unsure why. The service is running as "Local System."
      should i not be able to run both Windows event logging and File logging in the same yaml file?
2

Hi @Emorta,

Do you have any errors or warnings in the logs at all?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.