Winlogbeat configuration issues

Elastic Stack Beats
1

hi everyone,
I have recently installed winlogbeat and configured it to forward the logs but i am unable to receive the logs. Can anyone help me with this?

2

Please, don't post screenshots of logs or configs!

Configuration format is yaml. And # is a comment. You have commented out the output.logstash line

3 
#output.logstash:
  # The Logstash hosts
  -hosts: ["192.168.8.195:5044"]

  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
4

did you already uncomment output.logstash?

It must say:

output.logstash:
  # The Logstash hosts
  - hosts: ["192.168.8.195:5044"]

  # Optional SSL. By default is off.
  # List of root certificates for HTTPS server verifications
  #ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
5

yes, @steffens done that. now receiving logs
thanks a lot

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.