# Winlogbeat wont send logs

**URL:** https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288
**Category:** Beats
**Tags:** winlogbeat
**Created:** [December 27, 2018, 9:38pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288 "2018-12-27T21:38:37Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![kevin.baker](https://avatars.discourse-cdn.com/v4/letter/k/a9a28c/32.png) [@kevin.baker](https://discuss.elastic.co/u/kevin.baker)
#### Post date: [December 27, 2018, 9:38pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288/1 "2018-12-27T21:38:37Z")

</div>

Forgive me, Ive been using Elk for less than a week. i am trying to get windows logs forwarded to Logstash, but cant seem to get them to go. I have seen a few different setups with SSL Certs and what not, are those required? I have only just configured the ELK stack so we dont have anything else in it at the moment. ITs likely that ive just missed a step or two in the configuration process. Any help would be appreciated. Thanks!

Kevin

---

<div class="post-metadata">

### Author: ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [January 2, 2019, 12:36pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288/2 "2019-01-02T12:36:54Z")

</div>

If you follow the [Winlogbeat getting started guide](https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-getting-started.html), you should get it working.

Certificates are optional, but it's highly recommended to setup encryption and authentication in production environments.

---

<div class="post-metadata">

### Author: ![drivera](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/drivera/32/39900_2.png) [@drivera](https://discuss.elastic.co/u/drivera)
#### Post date: [January 2, 2019, 7:01pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288/3 "2019-01-02T19:01:13Z")

</div>

Are you sure you are connecting to the LS host? Are you sure your configuration file is correct? You can check both by running the following two commands:

winlogbeat.exe test config  
winlogbeat.exe test output

If everything looks good, check the port in LS you are sending to. Are you getting a TCP connection or is the port even listening. I use

%netstat -an |grep "port number"

Good luck

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 30, 2019, 7:01pm UTC](https://discuss.elastic.co/t/winlogbeat-wont-send-logs/162288/4 "2019-01-30T19:01:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
