I would like to collect multiple Windows host events using WMI. Can I deploy Logstash-forwarder in each of the Windows machine to collect events (either using Windows Eventlog/WMI input plugins) and forward those collected events to Central Logstash Server (version 1.5 RC2) ?
venkaty (venkat) #1
magnusbaeck (Magnus Bäck) #2
logstash-forwarder only reads plain text files. It's not capable of collecting logs via WMI. You'll probably have more luck with Logstash or NXLog.
system (system) #3