Winlogbeat output to Graylog

No idea about Graylog. But winlogbeat resends events on failure (missing ACK). Checks logs and metrics in logs about send failures.