Winlogbeat range doesnt seem to work for drop_events filter

Elastic Stack Beats
,
1

Using version 8.9.1

The range in drop events doesn't seem to work:

  • range.winlog.event_id: { gte: 1100, lte: 4609 }

Its throws a waning and also doesnt send the data.

Thanks,
JJ

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.