# Read encrypted windows event logs
**URL:** https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380
**Category:** Beats
**Tags:** windows, winlogbeat, elastic-agent
**Created:** [February 16, 2022, 2:39pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380 "2022-02-16T14:39:58Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@EliWallic](https://discuss.elastic.co/u/EliWallic)
#### Post date: [February 16, 2022, 2:39pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380/1 "2022-02-16T14:39:58Z")
Hello community,
for security reasons I have some eventlogs encrypted with an certificate.
Windows native its possible to decrypt them in order to get access again.
Is it also possible with winlogbeat or filebeat?
Best regards
---
### Author:  [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)
#### Post date: [February 16, 2022, 4:34pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380/2 "2022-02-16T16:34:09Z")
There is no native feature in the Beats yo do that.
---
### Author:  [@EliWallic](https://discuss.elastic.co/u/EliWallic)
#### Post date: [February 16, 2022, 8:34pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380/3 "2022-02-16T20:34:13Z")
Hi @legoguy1000
thanks for the info. This would be a nice feature request pointing to endpoint security / environment security
Best Regards.
---
### Author:  [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)
#### Post date: [February 16, 2022, 9:10pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380/4 "2022-02-16T21:10:46Z")
The problem with that is there are so many ways this would be approached, I don't think it would be sustainable. Are you talking about encrypted files, windows event logs, encrypted text within log files, encrypted syslog.....?
---
### Author:  [@EliWallic](https://discuss.elastic.co/u/EliWallic)
#### Post date: [February 16, 2022, 10:30pm UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380/5 "2022-02-16T22:30:31Z")
in my case - just the encrypted windows event logs
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 17, 2022, 12:31am UTC](https://discuss.elastic.co/t/read-encrypted-windows-event-logs/297380/6 "2022-03-17T00:31:03Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.