# Trace Event Logs
**URL:** https://discuss.elastic.co/t/trace-event-logs/75537
**Category:** Beats
**Tags:** winlogbeat
**Created:** [February 17, 2017, 5:22pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537 "2017-02-17T17:22:09Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Dan\_Cook1](https://discuss.elastic.co/u/Dan_Cook1)
#### Post date: [February 17, 2017, 5:22pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537/1 "2017-02-17T17:22:09Z")
The vast majority of useful logging on Windows is now in the ETW style trace logs. These are visible in Event Viewer under the "Applications and Service Logs". Can Heartbeat gather and ship these logs?
I ask because the documentation says to use Powershell command "get-eventlog \*" to view a list of event logs. This command will only list old style event logs and not the newer ETW trace style, to list the newer style logs - you should use "get-winevent -listlog \*"
---
### Author:  [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [February 20, 2017, 3:35pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537/2 "2017-02-20T15:35:24Z")
Have you see this: [https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-winlogbeat-options.html#configuration-winlogbeat-options-event\_logs-name](https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-winlogbeat-options.html#configuration-winlogbeat-options-event_logs-name)
Winlogbeat can read the logs listed by `Get-WinEvent -ListLog *`.
Only Analytic and Debug logs are based on ETW and Winlogbeat cannot read those. Analytic and Debug logs are disabled and hidden by default in event viewer.
There has been a request to add a feature in Beats for ETW. [https://github.com/elastic/beats/issues/2073](https://github.com/elastic/beats/issues/2073)
---
### Author:  [@Dan\_Cook1](https://discuss.elastic.co/u/Dan_Cook1)
#### Post date: [February 21, 2017, 5:43pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537/3 "2017-02-21T17:43:27Z")
Thankyou @andrewkroh - No i hadn't seen that and feel slightly embarrassed as its in the offical docs!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 21, 2017, 5:43pm UTC](https://discuss.elastic.co/t/trace-event-logs/75537/4 "2017-03-21T17:43:49Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.