# Windows server is almost not generating logs after winlogbeat installation **URL:** \ **Category:** Beats\ **Tags:** winlogbeat\ **Created:** [June 20, 2016, 7:14am UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275 "2016-06-20T07:14:59Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![sumeshms](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sumeshms/32/10409_2.png) [@sumeshms](https://discuss.elastic.co/u/sumeshms)\ **Post date:** [June 20, 2016, 7:15am UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/1 "2016-06-20T07:15:00Z")
Hello Am facing a wired issue, After the installation of winlogbeat on two servers , both of them are generating only a few number of logs. Most of the time the servers are not logging anything. Any idea ? Regards Sumesh MS ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [June 20, 2016, 12:24pm UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/2 "2016-06-20T12:24:24Z")
Are you referring to the log output of Winlogbeat (i.e. the contents of C:\ProgramData\winlogbeat\Logs\winlogbeat.log)? ---
**Author:** ![sumeshms](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sumeshms/32/10409_2.png) [@sumeshms](https://discuss.elastic.co/u/sumeshms)\ **Post date:** [June 20, 2016, 1:07pm UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/3 "2016-06-20T13:07:52Z")
No, logs on windows server, which is accessible over Windows Event Viewer. Regards Sumesh ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [June 20, 2016, 1:39pm UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/4 "2016-06-20T13:39:34Z")
So if I understand correctly, the number of event log records being generated by Windows and other applications decreased after you installed Winlogbeat? Winlogbeat doesn't do anything more that read event records from logs using the Windows APIs so I can't hypothesize any way Winlogbeat could affect the generation of event log records by the OS or other applications. ---
**Author:** ![sumeshms](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sumeshms/32/10409_2.png) [@sumeshms](https://discuss.elastic.co/u/sumeshms)\ **Post date:** [June 21, 2016, 5:29am UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/5 "2016-06-21T05:29:40Z")
Thanks, I do understand. But the issue is only having for server where winlogbeat is installed. Regards Sumesh ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [June 21, 2016, 1:18pm UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/6 "2016-06-21T13:18:22Z")
Do you have any measurements of the number of events per day per source? You can use [`Get-EventLog`](https://technet.microsoft.com/en-us/library/hh849834.aspx) and some PowerShell scripting to make some measurements. ---
**Author:** ![sumeshms](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sumeshms/32/10409_2.png) [@sumeshms](https://discuss.elastic.co/u/sumeshms)\ **Post date:** [June 23, 2016, 9:42am UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/7 "2016-06-23T09:42:48Z")
Hello Andrew I can measure the number of logs generated in the windows servers. Now a days those are in hundreds. I am pretty sure I was getting thousands of logs before. Regards Sumesh ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 14, 2016, 9:43am UTC](https://discuss.elastic.co/t/windows-server-is-almost-not-generating-logs-after-winlogbeat-installation/53275/8 "2016-07-14T09:43:18Z")
This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.