Hello, I am using nxlog to send windows data at my ELK. I would like to parse the "message" part. An example below : "message": [ "2022-04-25 10:54:13 - DESKTOP-QMCS5UA - Security - INFO - 4672 - Privilèges spéciaux attribués à la nouvelle ouverture de session. Sujet : ID de sécurité…

Logstash parse windows event nxlog

Badger April 29, 2022, 5:21pm 6

You have not included anything in the custom pattern. It does not match anything.

Topic		Replies	Views
Windows Event Viewer Logs Parsing without Winlogbeat Logstash	2	924	September 9, 2020
Windows nxlog filtering Logstash	13	4639	July 6, 2017
Parsing additional data in a windows event log Logstash	4	1714	July 9, 2018
Failed to extract detail information from Windows Event log Logstash	3	1753	July 6, 2017
Windows Event Logs - missing fields Logstash	9	2516	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash parse windows event nxlog

Related topics