Not able to monitor windows events on running metricbeat as a container.
Metricbeat is launched as container using below command
FROM docker.elastic.co/beats/metricbeat:7.14.0
COPY metricbeat.yml /usr/share/metricbeat/metricbeat.yml
USER root
RUN chown root:metricbeat /usr/share/metricbeat/metricbeat.yml
USER metricbeat