Hi, Filebeat and Winlogbeat seem to work similarly. Both beats seem to be able to process logs from Windows (in the case of Filebeats, it can also process logs from other OS). My questions would be: 1- Which beat is better to process Windows logs? 2- What advantages does one have over the other? …

Files on the file system = filebeat, windows events = winlogbeat Filebeat is agnostic and can process any file. Winlogbeat will only pull logs from the event logger Yep, depends on if it's a file or not (as per above)

Winlogbeat vs Filebeat

Elastic Stack Beats

ManuelF (Manuel) March 31, 2020, 4:27pm 3

Thank you @warkolm. Your easy explanation clears the doubts I had. I'm going to test both beats and determine if I should use both or just one of them.

Topic		Replies	Views
Filebeat vs Winlogbeat Beats filebeat	2	3139	March 30, 2020
Windows log forwarding using filebeat Beats filebeat	11	5287	March 1, 2017
Can Filebeat ship the below type of log files? Or WInlogbeat? Beats filebeat	2	303	April 7, 2020
Can filebeat push the Windows Event logs to logstash Beats filebeat	10	13193	July 6, 2016
How to use Filebeats for collecting Windows events and Microsoft Exchange Logs Beats filebeat	2	1854	July 5, 2017

Winlogbeat vs Filebeat

Related topics