I am having issues with packetbeat on Windows. i connected to my wifi and trying run packetbeat and capture the network. but in kibana I am seeing only empty data fields........PS C:\Program Files\Elastic\Beats\8.14.3\packetbeat> .\packetbeat.exe devices
0: \Device\NPF_{2650CC6D-D3B1-4AFE-8E61-95C3229A60E9} (WAN Miniport (Network Monitor)) (Not assigned ip address)
1: \Device\NPF_{CE5417B9-F2B7-411D-B07C-AED6BCB38B30} (WAN Miniport (IPv6)) (Not assigned ip address)
2: \Device\NPF_{0751F52C-9224-44A5-81BF-A748232C40EC} (WAN Miniport (IP)) (Not assigned ip address)
3: \Device\NPF_{00F716A8-D0E4-49F7-BDC0-9AEA3261A183} (Intel(R) Dual Band Wireless-AC 8265 #2) (192.168.29.219 fe80::1381:841b:7ad9:e217)
4: \Device\NPF_{45FB512F-AA2D-41F2-B8F6-ED6220E9761F} (VMware Virtual Ethernet Adapter for VMnet8) (169.254.27.191 fe80::5042:15e6:2496:a222)
5: \Device\NPF_{633A6126-772B-49D8-9EA2-6D3ED9A2BA6D} (VMware Virtual Ethernet Adapter for VMnet1) (192.168.203.1 fe80::5550:1c02:206:b224)
6: \Device\NPF_{712B2491-24C7-4330-B219-5669FF3B48DA} (Microsoft Wi-Fi Direct Virtual Adapter #2) (169.254.220.195 fe80::3cc0:ec6e:a986:efe5)
7: \Device\NPF_{E998AC90-4475-4F92-B930-8B0D62E0103B} (Microsoft Wi-Fi Direct Virtual Adapter) (169.254.217.122 fe80::958c:fbbe:63a4:aed5)
8: \Device\NPF_{A3D7EA30-E964-433E-BCBC-FDA606DB14C1} (VirtualBox Host-Only Ethernet Adapter) (192.168.56.1 fe80::aaad:54dd:c72a:ada)
9: \Device\NPF_Loopback (Adapter for loopback traffic capture) (::1 127.0.0.1)
10: \Device\NPF_{98043B7A-E065-418D-89F0-8D56B509BDF3} (Fortinet Virtual Ethernet Adapter (NDIS 6.30)) (169.254.221.20 fe80::fa2a:4048:fe90:374a)
11: \Device\NPF_{98606F44-13A1-4181-A453-2AE15F497387} (Intel(R) Ethernet Connection (4) I219-LM) (192.168.30.223 169.254.180.112 fe80::960d:24b5:a778:4fe6)
PS C:\Program Files\Elastic\Beats\8.14.3\packetbeat> Restart-Service packetbeat
PS C:\Program Files\Elastic\Beats\8.14.3\packetbeat> Get-Service packetbeat
and configuration lines ........packetbeat.interfaces:
device: 3
---------------------------- Elasticsearch Output ----------------------------
setup.template.name: "packetbeat"
setup.template.pattern: "packetbeat-*"
setup.template.fields: "fields.yml"
setup.template.overwrite: true
output.elasticsearch:
hosts: ["http://192.168.29.221:9200"]
pipeline: "packetbeat-8.14.3-routing"
index: "packetbeat-%{[agent.version]}-%{+yyyy.MM.dd}"