Winlogbeat proxy support

Elastic Stack Beats
1

Hi,

I 'm currently using latest version of winlogbeat 7.4.1 to send data to an ELK stack.

It works well when computer has a direct connection to internet but it doesn't with a proxy.

When i add proxy parameter in winlogbeat file configuration connection failed.

// output.elasticsearch:
// # Array of hosts to connect to.
// hosts: ["https://elk.example.com:443"]
// proxy_url: 'proxy.lan.loc:3128'

On proxy logs i don't see any connection at all. Winlogbeat seems to ignore the parameter and continue to send data directly.

Is anyone having the same issue ?

2

Hi,

Have you tried setting proxy_disable: true ?

3

Hi,

I've tried with both value false and true same result.

image
image.png1493×239 117 KB

4

Shouldn't the proxy url also be https ?

5

No.
using http proxy url works like a charm with other software.
The issue is winlogbeat do not take into account proxy configuration when i make deeper troubleshooting i can see it sends its request directly and not through proxy.