Hi, I am trying to get my Sysmon data to winlogbeat and then to security onion. (unfortunatly, the sysmon.xml and winlogbeat.yml are too big to put here. I wish i could just attach them as files) I am having two issues. 1 – the winlogbeat logs where being fed continually, but now it is only getti…

Winlogbeat logs only show that it is 6kb

Chenhui_Wang (Chenhui Wang) March 16, 2023, 1:40am 2

Hi @iqworks , probably you could post this to Beats - Discuss the Elastic Stack and I believe this can be better answered.

Topic		Replies	Views
Winlogbeat and huge Windows Security Log Beats winlogbeat	3	3679	November 28, 2016
Logstash vs winlogbeats from external machine Logstash	3	2609	June 19, 2017
Sending sysmon logs from Winlogbeat to Logstash Beats	5	803	December 18, 2019
Unable to get winlogbeat to send to logstash Beats winlogbeat	29	5919	May 25, 2017
Problems getting logs in with winlogbeat Beats winlogbeat	11	1373	May 11, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Winlogbeat logs only show that it is 6kb

Related topics