WINLOGBEAT-NIFI-LISTENBEATS1.18.0 don't work correctly

Elastic Stack Beats
1

Hi All,

I ship windows events using ListenBeats in NiFi, when the data arrived is duplicated in 2 FlowFiles.

I show winlogbeat's config:

winlogbeat.event_logs:

  • name: Microsoft-Windows-Windows Defender/Operational

------------------------------ Logstash Output -------------------------------

output.logstash:

The Logstash hosts

hosts: ["192.168.1.54:1234"]

================================= Processors =================================

processors:

  • add_host_metadata:
    netinfo.enabled: true

Thanks for all

2

Welcome to our community! :smiley:

Please format your code/logs/config using the </> button, or markdown style back ticks. It helps to make things easy to read which helps us help you :slight_smile:

I am not familiar with either listenbeats or nifi, but what does Winlogbeat have to do with either of them?

3

Sorry for the format, next time I will use it.

I'm using Apache Nifi because I want to filter the data I receive from WinlogBeat.

About the problem, ListenBeats must receive one message about the shipped Logs, but it receives duplicated message, sometimes two equals, other times three equals, and I don't know why.

Thanks for all

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.