Unable to send logs from windows 10 to kibana

Elastic Stack Beats
1

Hello,

I'm getting problem in sending logs from winlogbeat-6.3.2-windows-x86_64 to kibana(version - 4.5.4), from windows 10.

After installing and start running the winlogbeat service successfully as given below :-

PS C:\Program Files\ELK_Beats\winlogbeat-6.3.2-windows-x86_64> .\install-service-winlogbeat.ps1

Status   Name               DisplayName
------   ----               -----------
Stopped  winlogbeat         winlogbeat


PS C:\Program Files\ELK_Beats\winlogbeat-6.3.2-windows-x86_64> Start-Service winlogbeat

but still i'm unable to see the logs on kibana server, i made some changes in winlogbeat.yml which are given below:-

#-------------------------- Elasticsearch output ------------------------------
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["localhost:9200"]

  # Optional protocol and basic auth credentials.
  #protocol: "https"
  #username: "elastic"
  #password: "changeme"

#----------------------------- Logstash output --------------------------------
output.logstash:
  # The Logstash hosts
  hosts: ["server_ip:port"]
  index: winlogbeat
  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]

  # Certificate for SSL client authentication
  #ssl.certificate: "/etc/pki/client/cert.pem"

  # Client Certificate Key
  #ssl.key: "/etc/pki/client/cert.key"

Thanks

2

Did you test your configuration? (See 5 on the Configuring Winlogbeat page).

PS C:\Program Files\Winlogbeat> .\winlogbeat.exe test config -c .\winlogbeat.yml -e

Did you test the output connection?

PS C:\Program Files\Winlogbeat> .\winlogbeat.exe test output -c .\winlogbeat.yml -e

Were there any errors reported from those tests? Were there any errors in the log file from Winlogbeat?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.