Remote server windows event logs

(Shra) #1

I was able to successfully setup ELK on a server and it is working great.

Now, I'd like to read windows event logs from a bunch of remote servers. However, I do not want to install anything on those servers in order to send event logs to my logstash server. Is there any way I can accomplish that ?

(Mark Walkom) #2

I don't know what format that is though, so you'd have to try it.

Most people use nxlog at the moment.

(Shra) #3

Thank you for your response Mark.

I am also looking into Couchbase as an alternative, because we already use that on our production servers. I will look into the MSDN link you provided.

(system) #4