Hi, please don't judge me too harsh. I'm new to ELK and have question regarding creation of new fields from windows log in logstash. Windows logs are forwarded to logstash by winlogbeat plugin. I need extract eventlog subject from eventlog and create new field from it. In the following image its …

Logstash: creating new fields from windows event log

system (system) Closed August 2, 2018, 1:29pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Extracting fields from existing message field in windows logs Logstash	4	595	January 11, 2022
Extract Windows Event Log fields Beats	1	616	September 23, 2017
Windows Event Viewer Logs Parsing without Winlogbeat Logstash	2	924	September 9, 2020
Extract Field from Windows EventLog using Logstash Logstash windows	4	778	January 3, 2020
Winlogbeat and User sessions (parsing fields from message) Beats winlogbeat	10	8414	April 12, 2016