# Selected windows log events

**URL:** <https://discuss.elastic.co/t/selected-windows-log-events/45441>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [March 25, 2016, 12:37pm UTC](https://discuss.elastic.co/t/selected-windows-log-events/45441 "2016-03-25T12:37:31Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zen.xen](https://avatars.discourse-cdn.com/v4/letter/z/e495f1/32.png) [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Post date:** [March 25, 2016, 12:37pm UTC](https://discuss.elastic.co/t/selected-windows-log-events/45441/1 "2016-03-25T12:37:31Z")

</div>

Hello,  
I am looking for an information but I haven't found it, is it possible to exclude some events from sending to ELK installed and configured on Windows server?

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [March 25, 2016, 12:45pm UTC](https://discuss.elastic.co/t/selected-windows-log-events/45441/2 "2016-03-25T12:45:07Z")

</div>

It's not possible in v1, but it will be a feature in the next major release, [v5](https://www.elastic.co/v5). The new feature is currently in [pull request](https://github.com/elastic/beats/pull/1218).

---

<div class="post-metadata">

**Author:** ![zen.xen](https://avatars.discourse-cdn.com/v4/letter/z/e495f1/32.png) [@zen.xen](https://discuss.elastic.co/u/zen.xen)\
**Post date:** [March 25, 2016, 2:56pm UTC](https://discuss.elastic.co/t/selected-windows-log-events/45441/3 "2016-03-25T14:56:02Z")

</div>

Thank you for quick answer

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [April 12, 2016, 1:49pm UTC](https://discuss.elastic.co/t/selected-windows-log-events/45441/4 "2016-04-12T13:49:15Z")

</div>


