# Winlogbeat is not collecting Application logs from Windows 7

**URL:** <https://discuss.elastic.co/t/winlogbeat-is-not-collecting-application-logs-from-windows-7/81115>\
**Category:** Elasticsearch\
**Created:** [April 4, 2017, 10:32am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-collecting-application-logs-from-windows-7/81115 "2017-04-04T10:32:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![manish\_verma](https://avatars.discourse-cdn.com/v4/letter/m/97f17d/32.png) [@manish\_verma](https://discuss.elastic.co/u/manish_verma)\
**Post date:** [April 4, 2017, 10:32am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-collecting-application-logs-from-windows-7/81115/1 "2017-04-04T10:32:01Z")

</div>

Hello ,

I have a complete setup of ELK stack on Ubuntu server 14.04. Also I have installed winlogbeat 5.3 on another windows 7 host. winlogbeat is not collecting application logs. Only logs i could see on kibana is of winlogbeat service start and stop events. Please see the winlogbeat.yml config file.

![](https://us1.discourse-cdn.com/elastic/original/3X/f/b/fb2813551c7f37ed5b32ae78c9564634cd3ed576.jpeg)

Can you please help me out.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![Leon\_Nell](https://avatars.discourse-cdn.com/v4/letter/l/ebca7d/32.png) [@Leon\_Nell](https://discuss.elastic.co/u/Leon_Nell)\
**Post date:** [April 4, 2017, 10:40am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-collecting-application-logs-from-windows-7/81115/2 "2017-04-04T10:40:15Z")

</div>

You need to specify the log you want to collect in the config file:

In your case, you want the Application Event logs, add this below your System entry:

- name: Application

So, the snippet in your config file should look similar to this:

event\_logs:  
- name: Application  
ignore\_older: 72h  
- name: Security  
- name: System

---

<div class="post-metadata">

**Author:** ![manish\_verma](https://avatars.discourse-cdn.com/v4/letter/m/97f17d/32.png) [@manish\_verma](https://discuss.elastic.co/u/manish_verma)\
**Post date:** [April 4, 2017, 10:53am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-collecting-application-logs-from-windows-7/81115/3 "2017-04-04T10:53:31Z")

</div>

Issue resolved. Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2017, 10:53am UTC](https://discuss.elastic.co/t/winlogbeat-is-not-collecting-application-logs-from-windows-7/81115/4 "2017-05-02T10:53:38Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.