This is more of a question rather than an issue. I'm installing filebeat in multiple PCs. Here are the steps I follow:
1.) Copy the filebeat directory to the C drive.
2.) Open Powershell as administrator.
3.) Install filebeat service via "PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-filebeat.ps1"
4.) Start the service via "Start-Service filebeat"
On some PCs, I'm getting problems. While I've confirmed that the service is running, not all of them are sending out logs. This had me thinking and I have the following questions.
1.) What would happen if I did not run powershell as administrator?
2.) Do I have to install the service per user so that it would start up when that user logs in?
3.) Am I on the right track with installing filebeat or do I need to check other steps and things to get it up and running?