Winlogbeat Index

Hello there, I´m trying the elk stack 8 and I´m a bit lost. Configured the security portion and when I send the logs over to the Elasticsearch cluster, I cannot see the index on index management. But I can see after ticking hidden indices. Something change about the index on elk 8? And also winlogbeat creates a index called:


Is that alright??

Thanks for the attention.

Yes that is fine. 8.0 uses datastreams to store the data.

What about the name convention winlogbeat-* dosent change a thing? I mean, dashboards, security and etc?


I'm not sure how of the technical details at that level to be honest. There may be aliases or other things in place to handle it.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.