I'm new to Elasticsearch and configured 7 version running on CentOS 7. Trying to configure windows server to send event logs to ESS server but I'm not able to see any events under winlogbeat index pattern.
Below is my winlogbeat.yml file.
winlogbeat.event_logs: - name: Application - name: System - name: Security setup.template.settings: index.number_of_shards: 1 setup.kibana: host: "ESS_IP:5601" output.logstash: hosts: ["ESS_IP:5044"] processors: - add_host_metadata: ~ - add_cloud_metadata: ~ - add_docker_metadata: ~
Please help on this.