# Metric beats and WMI

**URL:** <https://discuss.elastic.co/t/metric-beats-and-wmi/289063>\
**Category:** Beats\
**Tags:** beats-module, metricbeat\
**Created:** [November 12, 2021, 11:51am UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063 "2021-11-12T11:51:30Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![tractor\_boy](https://avatars.discourse-cdn.com/v4/letter/t/278dde/32.png) [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Post date:** [November 12, 2021, 11:51am UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/1 "2021-11-12T11:51:30Z")

</div>

It has been suggested that it is possible to configure beats to collect data based on a WMI query.

Is this true, and if so is there any useful documentation that you might be able to point me towards?

thanks

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 15, 2021, 10:37pm UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/2 "2021-11-15T22:37:19Z")

</div>

Here is the documentation on Metricbeat and the Windows module - [Windows module | Metricbeat Reference [7.15] | Elastic](https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-module-windows.html)

I don't see any reference to WMI though.

---

<div class="post-metadata">

**Author:** ![tractor\_boy](https://avatars.discourse-cdn.com/v4/letter/t/278dde/32.png) [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Post date:** [November 18, 2021, 12:45pm UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/3 "2021-11-18T12:45:39Z")

</div>

I've been advised that logstash has WMI functionality. (Trying to work out how to install & configure logstash currently)

Is there any chance that that could be moved into metricbeats?

Reasons

1. As I understand logstash is a central function. So using this requires remote calls and security configuration
2. metric beat is where metrics are collate and set through to elastic. So why go somewhere else for your metrics.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 19, 2021, 4:27am UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/4 "2021-11-19T04:27:15Z")

</div>

You'd want to raise a feature request to get that considered, I can't give advice on it beyond that sorry!

---

<div class="post-metadata">

**Author:** ![tractor\_boy](https://avatars.discourse-cdn.com/v4/letter/t/278dde/32.png) [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\
**Post date:** [November 19, 2021, 8:35am UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/5 "2021-11-19T08:35:27Z")

</div>

How would I go about that?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 21, 2021, 10:09pm UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/6 "2021-11-21T22:09:12Z")

</div>

> **[Build software better, together](https://github.com/elastic/beats/issues/new?assignees=&labels=&template=feature-request.md)**
>
> GitHub is where people build software. More than 73 million people use GitHub to discover, fork, and contribute to over 200 million projects.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 20, 2021, 12:10am UTC](https://discuss.elastic.co/t/metric-beats-and-wmi/289063/7 "2021-12-20T00:10:10Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.