How does Logstash keep track of Winlogbeat events?

Elastic Stack Logstash
1

Hi,
I am trying to use winlogbeat and Logstash. How does Logstash keep track of winlogbeat events if Logstash is restarted?
Thanks

2

It doesn't. It's Winlogbeat that makes sure events aren't resent.

3

Thanks Magnus. What if I want to migrate from running Logstash from command line to Running Logstash as a service?

4

Why would that be a problem?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.