# Kibana showing windows\_eventlog but not sysmon

**URL:** <https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104>\
**Category:** Kibana\
**Created:** [May 10, 2023, 4:23pm UTC](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104 "2023-05-10T16:23:43Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![iqworks](https://avatars.discourse-cdn.com/v4/letter/i/a9a28c/32.png) [@iqworks](https://discuss.elastic.co/u/iqworks)\
**Post date:** [May 10, 2023, 4:23pm UTC](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104/1 "2023-05-10T16:23:43Z")

</div>

Hi, I finally got windows data into security onion. But I dont see sysmon categories?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/d/dd3b1c4d3f8cb212e8f2b91d69f3253fd72ad185.png)

But I do show windows\_events?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/0/3039b17a6c2c03b3b6868f0574348dd5748ba7be.png)  
are windows\_eventlogs the same as sysmon maybe? not sure.

thanks for any suggestions or advice

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 11, 2023, 2:48am UTC](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104/2 "2023-05-11T02:48:21Z")

</div>

Without wanting to be dismissive, this looks to be an security onion implementation question rather than a Kibana one. It might be worth asking on their forums.

---

<div class="post-metadata">

**Author:** ![iqworks](https://avatars.discourse-cdn.com/v4/letter/i/a9a28c/32.png) [@iqworks](https://discuss.elastic.co/u/iqworks)\
**Post date:** [May 11, 2023, 1:57pm UTC](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104/3 "2023-05-11T13:57:01Z")

</div>

Thanks warkolm,yes, I did that as well. I thought that because kibana is showing the windows\_eventlogs module that I would ask you folks.

I think i will ask the microsoft forum as well.

thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 8, 2023, 1:57pm UTC](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104/4 "2023-06-08T13:57:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.