Is there a way to include meaningful descriptions to each of the event_ids that are being ingested into logstash?
When I use the event_id to display top five for example I get the actual Event ID from Windows
4,634 4,648 4,768 4,625 4,740
I would like it to expand it to display something like
4740 account locked
4625 failed to logon
and so on