# Winlogbeat Windows config to see logs on Kibana Dashboard **URL:** https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261 **Category:** Beats **Tags:** winlogbeat **Created:** [September 5, 2019, 1:21pm UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261 "2019-09-05T13:21:00Z") **Posts on this page:** 8 **Page:** 1
### Author: ![Luuckyx](https://avatars.discourse-cdn.com/v4/letter/l/35a633/32.png) [@Luuckyx](https://discuss.elastic.co/u/Luuckyx) #### Post date: [September 5, 2019, 1:21pm UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/1 "2019-09-05T13:21:00Z")
Hello everyone,i need help in Winlogbeat config to see logs on Kibana Dashboard. I have install a ELK server on a ubuntu 18.04 virtualisation and it's work ! no problem here. I need add logs of a Virtual Windows Server into the Kibana Dashboard. To do this i install Winlogbeat and only Winlogbeat on my Virtual WindowsServer (does I need install logstach too ? or Elasticsearchmaybe ?) My ELK server as the ip address 192.168.43.24 and my Windows Server as ip address : 192.168.43.89 (ping on ELK server ok) This is my winlogbeat.yml uncomment : ![Winlobeatconfig](https://us1.discourse-cdn.com/elastic/original/3X/d/3/d3c5a9dce7142d4f5999d924909428fe524ef10c.png) On Powershell when i run "net start winlogbeat" the service start corectly. I try ".\winlogbeat.exe setup --dashboards" ![commande%20dashboard](https://us1.discourse-cdn.com/elastic/original/3X/2/8/288f90d274d4f43df7d4f717ff60f6e571a81295.png) Does i need change something in Logstash config file ? actually logstash listen on 5044. Please be indulgent I am a trainee lol Thank you. ---
### Author: ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp) #### Post date: [September 5, 2019, 2:28pm UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/2 "2019-09-05T14:28:46Z")
Hi @Luuckyx Have you configured correctly an input and output in your logstash? In that case, can you share both? ---
### Author: ![Luuckyx](https://avatars.discourse-cdn.com/v4/letter/l/35a633/32.png) [@Luuckyx](https://discuss.elastic.co/u/Luuckyx) #### Post date: [September 5, 2019, 2:50pm UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/3 "2019-09-05T14:50:34Z")
Hi @dgonzalezp, thank you for your help, I dont have make modification into my input or output config's files when i decide to add a windows server. ![beat%20confff](https://us1.discourse-cdn.com/elastic/original/3X/b/2/b2b87f3080b1d406d720340606f9024ff6779bd2.png) ![outputconf](https://us1.discourse-cdn.com/elastic/original/3X/8/0/8023be1480b6d06ba15cd03b171c09a009d9e49b.png) ---
### Author: ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp) #### Post date: [September 6, 2019, 6:55am UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/4 "2019-09-06T06:55:18Z")
Hi again @Luuckyx sorry about the delay. Logstash looks good. Can you see any index created in Kibana like in the following screenshot? ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/5/e5e6bb991381dc4e589a9149f4d00d57ba810aea.png) ---
### Author: ![Luuckyx](https://avatars.discourse-cdn.com/v4/letter/l/35a633/32.png) [@Luuckyx](https://discuss.elastic.co/u/Luuckyx) #### Post date: [September 6, 2019, 7:37am UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/5 "2019-09-06T07:37:13Z")
Hello @dgonzalezp, thank you again spending time Nothing like that in my Kibana dashboard, you think its cause of HyperV Virtualisation ? Possible ? (Im not sure cause i can ping on my ELK server with the windows server and conversly) ![Kibana](https://us1.discourse-cdn.com/elastic/original/3X/0/0/00f2a1e0053fa5361de07b8cac7c185e473cb5db.png) ---
### Author: ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp) #### Post date: [September 6, 2019, 9:34am UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/6 "2019-09-06T09:34:44Z")
Ok Im back, sorry I had to create a new VM with Winlogbeat (I deleted my old one) anyway. Try adding the following lines to your winlogbeat.yml file: > output.elasticsearch: > hosts: ["yourelasticIP:9200"] If this dont work, try avoid logstash commenting the output in your your winlogbeat.yml file. ---
### Author: ![dgonzalezp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dgonzalezp/32/50804_2.png) [@dgonzalezp](https://discuss.elastic.co/u/dgonzalezp) #### Post date: [September 6, 2019, 9:47am UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/7 "2019-09-06T09:47:57Z")
And if that keep not working, please share your elasticsearch.yml ---
### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system) #### Post date: [October 4, 2019, 9:48am UTC](https://discuss.elastic.co/t/winlogbeat-windows-config-to-see-logs-on-kibana-dashboard/198261/8 "2019-10-04T09:48:05Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.