# Winlogbeat Not Logging All Event ID

**URL:** https://discuss.elastic.co/t/winlogbeat-not-logging-all-event-id/300725
**Category:** Beats
**Tags:** winlogbeat
**Created:** [March 25, 2022, 8:12pm UTC](https://discuss.elastic.co/t/winlogbeat-not-logging-all-event-id/300725 "2022-03-25T20:12:16Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![cmenuey](https://avatars.discourse-cdn.com/v4/letter/c/5fc32e/32.png) [@cmenuey](https://discuss.elastic.co/u/cmenuey)
#### Post date: [March 25, 2022, 8:12pm UTC](https://discuss.elastic.co/t/winlogbeat-not-logging-all-event-id/300725/1 "2022-03-25T20:12:16Z")

</div>

Hi all,

I installed the ELK stack to try it out, all services on the same windows server. I was able to get the winlogbeat on a couple of domain controllers and shipping logs. I enabled advanced logging to get group membership management, as well as directory changes sent to ELK. The issue is that in the dashboard I can see the security logs for events such as user logon/logoff, but it appears all of the logs are not being pulled into the dashboard and I'm not sure why. The winlogbeat.yaml is default except for the host settings for elastic/kibana. I also had to uncomment some log settings to get the 'winlogbeat.exe setup -e' Does this stand out to anybody?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 22, 2022, 10:12pm UTC](https://discuss.elastic.co/t/winlogbeat-not-logging-all-event-id/300725/2 "2022-04-22T22:12:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
