# How to read evtx file from remote server using Winlogbeat
**URL:** https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305
**Category:** Beats
**Tags:** winlogbeat
**Created:** [July 25, 2016, 3:13pm UTC](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305 "2016-07-25T15:13:23Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@yesoreyeram](https://discuss.elastic.co/u/yesoreyeram)
#### Post date: [July 25, 2016, 3:13pm UTC](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305/1 "2016-07-25T15:13:24Z")
How to read evtx file from remote server using winlogbeat? I have access to evtx path in the server. But i dont have access to execute winlogbeat agents in the remote server.
---
### Author:  [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [July 25, 2016, 3:18pm UTC](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305/2 "2016-07-25T15:18:15Z")
Winlogbeat does not support reading directly from a .evtx file.
One alternative would be to configure event forwarding and run Winlogbeat on the collector machine. [https://msdn.microsoft.com/en-us/library/bb427443(v=vs.85).aspx](https://msdn.microsoft.com/en-us/library/bb427443(v=vs.85).aspx)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 15, 2016, 3:18pm UTC](https://discuss.elastic.co/t/how-to-read-evtx-file-from-remote-server-using-winlogbeat/56305/3 "2016-08-15T15:18:17Z")
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.