I have 300mb evtx file and I want to send this file to logstash (which is on another machine) using Filebeat. How can I do this ?
NOTE:
I am using winlogbeat to send windows logs to logstash and it's working fine. but I got these evtx logs from somewhere else so how can I send them to logstash
You can use Winlogbeat to read the .evtx file (on a Windows host) and then send it to Logstash (the example shows elasticsearch, but you can change the output).
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.