Hi,
I want to know if it's possible to filter date of Wineventlog from Winlogbeat for index on kibana. Because my Kibana is index on date of Linux log, and I would like to add my windows servers on.
I find some tracks with @metadata but I do not understand how to recover the date from log.
For the moment i have just rename the timestamp field in my filter :
if [type] == "wineventlog" {
mutate {
add_field => { "timelog" => "%{@timestamp}" }
}
}
thank's you