Winlobeat not able to send cloud.instance.id fields or cloud fields into SIEM Elasticsearch

Gaurav_Rathi · April 17, 2020, 4:52am

Winlogbeat version 7.6.0

No cloud fields are appearing in Elasticsearch but other fields like agent,event,host,winlog are appearing.

I need cloud fields to fetch instance ID on which Winlogbeat has been installed and furthur automation is applied on this.

So this breaks my automation process.

Please help here.
@andrewkroh

Gaurav_Rathi · April 21, 2020, 5:42am

Hello Guys!!

Any Update on this ?

system · May 19, 2020, 5:42am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.