Hi, I am very new to the ELK stack and Beats. I have a ELK stack setup on a Windows 2012 R2 server and am collecting winlogbeat, packetbeat and topbeat from the host of the ELK stack. I'm now trying to add winlogbeat to one of my domain controllers. The ELK host and DC are on the same subnet, I've …

Winlogbeat actively refused by target

andrewkroh (Andrew Kroh) July 29, 2016, 7:21pm 9

Please check out the documentation on how to use Winlogbeat with Logstash.

You are missing a beats input and you need a few more parameters in your elasticsearch output. Then you should be good to go.

Topic		Replies	Views
Can't get winlogbeat to send logs Beats winlogbeat	6	3564	July 12, 2017
Problems with winlogbeat Logstash	11	1255	March 12, 2018
Cannot get winlogbeats to send to logstash Beats winlogbeat	2	1733	April 8, 2017
Logstash vs winlogbeats from external machine Logstash	3	2624	June 19, 2017
Trying to setup winlogbeat to ship windows events to working ELK stack Beats winlogbeat	20	13357	July 7, 2016