Windows event collection using Logstah Forwarder


(venkat) #1

I would like to collect multiple Windows host events using WMI. Can I deploy Logstash-forwarder in each of the Windows machine to collect events (either using Windows Eventlog/WMI input plugins) and forward those collected events to Central Logstash Server (version 1.5 RC2) ?


(Magnus B├Ąck) #2

logstash-forwarder only reads plain text files. It's not capable of collecting logs via WMI. You'll probably have more luck with Logstash or NXLog.


(system) #3