Hi, we have a lot of Windows Systems which are forwarding all their events to a central window system. From their I want to move the messages to logstash by using WinLogBeat. It works fine for all "Windows OS" Events, but when it forwards events from Applications like Citrix, I receive as message…

Winlogbeat message_error: "The system cannot find the file specified."

Markus_Korn (Markus Korn) August 9, 2016, 7:43am 14

Great Job!

THANK YOU

1 Like

Topic		Replies	Views
WinEventLog[System] error salvaging message: failed in EvtFormatMessage: The specified resource type cannot be found in the image file Beats winlogbeat	1	1217	November 24, 2022
Winlogbeat maximum size of event? Beats winlogbeat	15	2515	July 5, 2017
Winlogbeat continuously crashes on Windows 2003 server Beats winlogbeat	18	3239	November 4, 2022
Custom Application Eventlog not picked up by winlogbeat Beats winlogbeat	9	2491	March 5, 2018
Message filed is missing when Winlogbeat is used Beats winlogbeat	12	2598	October 10, 2017