Winlogbeat configuration issues


#1

hi everyone,
I have recently installed winlogbeat and configured it to forward the logs but i am unable to receive the logs. Can anyone help me with this?


(Steffen Siering) #2

Please, don't post screenshots of logs or configs!

Configuration format is yaml. And # is a comment. You have commented out the output.logstash line


#3
#output.logstash:
  # The Logstash hosts
  -hosts: ["192.168.8.195:5044"]

  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]

(Steffen Siering) #4

did you already uncomment output.logstash?

It must say:

output.logstash:
  # The Logstash hosts
  - hosts: ["192.168.8.195:5044"]

  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]

#5

yes, @steffens done that. now receiving logs
thanks a lot


(system) #6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.