# Log warning about missing Windows Events
**URL:** https://discuss.elastic.co/t/log-warning-about-missing-windows-events/303600
**Category:** Beats
**Tags:** winlogbeat
**Created:** [April 29, 2022, 12:20pm UTC](https://discuss.elastic.co/t/log-warning-about-missing-windows-events/303600 "2022-04-29T12:20:55Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Tadas](https://discuss.elastic.co/u/Tadas)
#### Post date: [April 29, 2022, 12:20pm UTC](https://discuss.elastic.co/t/log-warning-about-missing-windows-events/303600/1 "2022-04-29T12:20:55Z")
Hi!
There is no good way to detect situations where Winlogbeat is starting up and unable to continue ingesting events from the last bookmarked position (i.e. event log has rolled forward and some events have been lost).
Had this happen with Security events. Eventlog size wasn't sufficient, Winlogbeat was down and tons of security events were logged to the point where the log rolled over.
I think it would be useful if Winlogbeat had a warning in this case, so it's easy to detect and remediate. Currently it outputs a debug message, but enabling (and ingesting) debug level logs feels overkill, a warning would be more appropriate.
>
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 27, 2022, 2:21pm UTC](https://discuss.elastic.co/t/log-warning-about-missing-windows-events/303600/2 "2022-05-27T14:21:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.