# Using Winlogbeat with Docker-Compose under Linux

**URL:** <https://discuss.elastic.co/t/using-winlogbeat-with-docker-compose-under-linux/205105>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [October 24, 2019, 3:00pm UTC](https://discuss.elastic.co/t/using-winlogbeat-with-docker-compose-under-linux/205105 "2019-10-24T15:00:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![SKiD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skid/32/56535_2.png) [@SKiD](https://discuss.elastic.co/u/SKiD)\
**Post date:** [October 24, 2019, 3:00pm UTC](https://discuss.elastic.co/t/using-winlogbeat-with-docker-compose-under-linux/205105/1 "2019-10-24T15:00:56Z")

</div>

Hello,

I'm currently trying to integrate Winlogbeat to my Docker-Compose-Stack, but I'm not really successful with it. The problem is, that I normally download the current Logstash or Filebeat version (referenced in my docker-compose.yml). I want to do the same with Winlogbeat, but as I saw on the [docker.elastic.co](http://docker.elastic.co) website, there is no image for doing that. Also, as I was searching how to integrate Winlogbeat to my stack, I couldn't find any helpful topics. I want to use Winlogbeat on my Linux stack by referencing on local EVTX file archives. Is there currently a possibility to do so?

Thank you very much,  
Danny.

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [October 25, 2019, 1:30am UTC](https://discuss.elastic.co/t/using-winlogbeat-with-docker-compose-under-linux/205105/2 "2019-10-25T01:30:51Z")

</div>

Winlogbeat depends on the APIs of Windows to read evtx files. So it will not be possible to use Winlogbeat on Linux for this.

---

<div class="post-metadata">

**Author:** ![SKiD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/skid/32/56535_2.png) [@SKiD](https://discuss.elastic.co/u/SKiD)\
**Post date:** [October 25, 2019, 10:11am UTC](https://discuss.elastic.co/t/using-winlogbeat-with-docker-compose-under-linux/205105/3 "2019-10-25T10:11:26Z")

</div>

Hey andrewkroh,

thank you very much. I did not know that it is only available for Windows. Okay, I solved the problem by executing Winlogbeat on my Windows machine and passing the data via output to my ELK stack on my Linux machine via the right port.

Best regards,  
Danny.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2019, 10:11am UTC](https://discuss.elastic.co/t/using-winlogbeat-with-docker-compose-under-linux/205105/4 "2019-11-22T10:11:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.