Hello Elastic/Beat super heroes,
I am using filebeat to pull aws cloudwatch logs for an aws Active Directory service. So, the "message" property of the cloudwatch log record is the Windows Event log record. I would like to use winlogbeat module to process the Windows Event records and then store that in elastic.
So, filebeat pulls logs from Cloudwatch and passes "message" property values to winlogbeat and then onto elastic.
Is there a simple way to set up this pipeline without using logstash or other intermediary?
Thank you!
J