Is Winlogbeat not in 2.4 ?

[seckeymaker]

Version

2.4.50

Installation Method

Security Onion ISO image

Description

configuration

Installation Type

Standalone

Location

airgap

Hardware Specs

Exceeds minimum requirements

CPU

8

RAM

20

Storage for /

1tb

Storage for /nsm

1tb

Network Traffic Collection

span port

Network Traffic Speeds

1Gbps to 10Gbps

Status

Yes, all services on all nodes are running OK

Salt Status

No, there are no failures

Logs

No, there are no additional clues

Detail

Winlogbeat is not in downloads section ?

Guidelines

• I have read the discussion guidelines at Read before posting! #1720 and assert that I have followed the guidelines.

[cm-ops]

2.4 uses the Elastic Agent https://docs.securityonion.net/en/2.4/elastic-agent.html. There is a agent policy to bring in Windows event logs https://docs.securityonion.net/en/2.4/elastic-fleet.html#agent-policies-endpoints-initial

[seckeymaker]

Thank you.

…

On Wed, Mar 13, 2024, 8:14 AM Chris Morgret ***@***.***> wrote: 2.4 uses the Elastic Agent https://docs.securityonion.net/en/2.4/elastic-agent.html. There is a agent policy to bring in Windows event logs https://docs.securityonion.net/en/2.4/elastic-fleet.html#agent-policies-endpoints-initial — Reply to this email directly, view it on GitHub <#12566 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACEVBOPMYYBHEZFFPRHOWVDYYA7LLAVCNFSM6AAAAABESHRY7CVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DONZSGM4DO> . You are receiving this because you authored the thread.Message ID: <Security-Onion-Solutions/securityonion/repo-discussions/12566/comments/8772387 @github.com>