I am planning to install winlog beat in one of my Windows host.
How can we read last 3 month historic logs( logs generated before the winlogbeat installation) from windows event log.
My requirement is to read the log from last 3 months.
For example If I am installing today , I would like to read log from July 8th.
Is this ok ?
winlogbeat.event_logs: - name: Application ignore_older: 3 months - name: Security - name: System
Or once the fresh installation of winlogbeat , did this read all historic logs ?