# Winlogbeat not reading event id

**URL:** https://discuss.elastic.co/t/winlogbeat-not-reading-event-id/291308
**Category:** Beats
**Tags:** winlogbeat
**Created:** [December 9, 2021, 9:15am UTC](https://discuss.elastic.co/t/winlogbeat-not-reading-event-id/291308 "2021-12-09T09:15:18Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![aditi\_salunke](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aditi_salunke/32/85600_2.png) [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)
#### Post date: [December 9, 2021, 9:15am UTC](https://discuss.elastic.co/t/winlogbeat-not-reading-event-id/291308/1 "2021-12-09T09:15:18Z")

</div>

Hello,

Will winlogbeat forward the log to Elasticsearch if it is installed on AD and when someone lockout from the system and if the account lockout log is dropping on AD?

eg.: if 10 users are getting locked out on their systems , we can see lockout logs on kibana only for 4 users .

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 6, 2022, 11:15am UTC](https://discuss.elastic.co/t/winlogbeat-not-reading-event-id/291308/2 "2022-01-06T11:15:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
