Timestamp data is missing from winlog beat to logstash

Elastic Stack Beats
1

Hii friends
I am trying to collect the data sent from the winlog beat to the logstash. while i'm doing it i'm unable to get the timestamp of the event generated. I'm getting only the message but I also need timestamp to do some analysis. please help me in receiving the timestamp from the log at logstash.
Below is the winlog beat configuration
winlogbeat.event_logs:

  • name: Application
    ignore_older: 1h
  • name: Security
    ignore_older: 1h

- name: Active Directory Web Services

  • name: System
    ignore_older: 1h
    fields_under_root: true
    #----------------------------- Logstash output --------------------------------
    output.logstash:
    hosts: ["VM IP:5044"]
    #loadbalance: true
    #ssl.enabled: true

logging.to_files: true
logging.files:
path: C:\ProgramData\winlogbeat\Logs
logging.level: info

thank you

2

Let me check this issue. I'll be back wait tellsubway.

3

yeah sure Thank you. Please let me know if you know any?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.