Hello all! We are using Winlogbeat to collect data from Windows hosts. But we can't understand why 'message' field can't be parsed by Winlogbeat. Can anyone explain why this field doesn't parsed and maybe give answer how to do it properly?
Here example of one of 'message' fields. Some of this fields appears in parsed fields, but for example 'TargetImage' stay only in 'message'. Why it so and what this mean?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.