After updating to Winlogbeat 5 Alpha 2 and finally updating the template on my ELK stack I have ran Winlogbeats using the ./winlogbeat -e -d "publish" command.
Whilst I see a list of scrolling events I also see
sync.go:94: ERR Failed to publish events caused by: EOF
...and no data in Kibana! I have deleted on old indices and refreshed the winlogbeat index, restarted ES for fun but still nothing!
UPDATE: I can see data in Kibana but it's using my default Logstash index and not Winlogbeat. I therefore removed that from Kibana to test further and now trying to recreate.
Further still. I have looked at my winlogbeat index from the Kibana console and removed it. Then added the v5 alpha 2 template but I am not able to create a new winlogbeat index with appriopate fields.
All info appreciated.