Winlogbeat not reading event id

Elastic Stack Beats
1

Hello,

Will winlogbeat forward the log to Elasticsearch if it is installed on AD and when someone lockout from the system and if the account lockout log is dropping on AD?

eg.: if 10 users are getting locked out on their systems , we can see lockout logs on kibana only for 4 users .

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.