Dear All, I am trying to remove the dollar sign "$" from the event_data.TargetUserName found in the windows event viewer using Winlogbeat. I have found an answer this article in this forum: [image] Filtering out event_data.TargetUserName ending in $ Elasticsearch Trying …

Removing the "$" sign from event_data.TargetUserName

Tarek_Bensoltane (Tarek Bensoltane) September 6, 2018, 9:44am 7

Dear Peter,

I do not have access to Kibana at the moment.
I will get right back to you as soon as I get access to Kibana.

Thank you for your help.

Filtering out "managed service accounts"

Topic		Replies	Views
Filtering out event_data.TargetUserName ending in $ Elasticsearch	3	2353	December 20, 2017
Removing the “$” sign from event_data.TargetUserName Beats	1	550	October 30, 2021
Kibana 8.2.0 Filter event_data.TargetUserName ending with $ (service accounts etc) Kibana	2	342	July 26, 2022
Filtering out "managed service accounts" Kibana	3	579	July 8, 2020
Query Help search for $ Kibana	7	1442	July 6, 2017