# Winlogbeat Getting Started

**URL:** <https://discuss.elastic.co/t/winlogbeat-getting-started/73638>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [February 2, 2017, 7:12am UTC](https://discuss.elastic.co/t/winlogbeat-getting-started/73638 "2017-02-02T07:12:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ArjunSISA](https://avatars.discourse-cdn.com/v4/letter/a/3e96dc/32.png) [@ArjunSISA](https://discuss.elastic.co/u/ArjunSISA)\
**Post date:** [February 2, 2017, 7:12am UTC](https://discuss.elastic.co/t/winlogbeat-getting-started/73638/1 "2017-02-02T07:12:17Z")

</div>

hi everyone  
I have recently installed winlogbeat service.  
can anyone help me with the config files as to how to forward the windows log to logstash?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [February 2, 2017, 8:15am UTC](https://discuss.elastic.co/t/winlogbeat-getting-started/73638/2 "2017-02-02T08:15:19Z")

</div>

Have you read [https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-getting-started.html](https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-getting-started.html)?

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 22, 2017, 3:41am UTC](https://discuss.elastic.co/t/winlogbeat-getting-started/73638/3 "2017-02-22T03:41:27Z")

</div>