Windows events columns in Kibana - Winlogbeat #10092
-
|
Hello All, I sent the forwardedEvents via Winlogbeat with LogStash output from my Windows server which is the central point for all Windows events from all servers. It is working and I can see them but I cannot change the columns in the Kibana board. I need to see the event code, log level, error code, etc. How can I add them? / Is there any other better approach for this? Thank you very much in advance. How I see them now is below.
|
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
|
I think I overlooked this button, now I can add columns like the one below. The only think left is to delete the logs from the local server, I like to have only the forwarded events. Any advice to delete for deleting local Windows logs from SO?
|
Beta Was this translation helpful? Give feedback.
I think I overlooked this button, now I can add columns like the one below. The only think left is to delete the logs from the local server, I like to have only the forwarded events. Any advice to delete for deleting local Windows logs from SO?