How do large organizations manage beats deployment?

Elastic Stack Beats
1

Suppose I had to deploy Winlogbeat to 100 Windows servers and 1000 Windows workstations ; what is the best way to proceed with deploying winlogbeat to all these end-points?

Suppose I had to make a change to the config file on a section of the servers; what are some options available to push these changes?

Has someone achieved this using Active Directory? SCCM?

Just looking for options on the best way to proceed.

Thank you.

2

Any sort of automation. - puppet, chef, ansible, whatever the Windows specific one it.
AD might do it.

3

In addition, have a look at the issue here: https://github.com/elastic/beats/issues/464 We plan in the future to offer some centralised config management (not implemented yet). For deployment you will still need one of the automation tools recommended by @warkolm

1 Like
4

This would be awesome ! Thanks for the link. Cheers.