I have just installed Winlogbeat on one of my Windows 2019 terminal servers.
After configurion the .yml file I have entered setup commands:
winlogbeat.exe setup --index-management
winlogbeat.exe setup --dahsboards
The template was created and dashboards were added.
After inspecting the dashboards I noticed the following thing.
I have checked the index template mapping and I do not have any mappings for this field.
I have met with this error a lot of times during the last few months.
I did not change the configuration regarding the index template, index pattern in beats .yml
I have not idea what I am doing wrong so my mapping set up from beasts have missing fields.
I have a similar issue with 7.7 filebeat cisco module, 7.8 metricbeat system module, as well as I, have with filebeat 7.9.2 netflow module