How many beats (winlog) I can connect after Trail License expired ?
The problem is I dont see events from newly configured beats starting from moment when license has expired.
Is my issue related to license or I am doing something wrong ?
Regards,
Maxim
You should check the logs for Winlogbeat to help determine the cause. By default they are in C:\ProgramData\winlogbeat.
As long as you have minimally have the free Basic license Winlogbeat will ingest data directly to Elasticsearch. You can can use POST /_license/start_basic to setup a basic license on your cluster.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.