Winlogbeat is an Elastic Beat that ships Windows event logs to Elasticsearch or Logstash.  It’s based on the libbeat framework. You can install it as a Windows service. Winlogbeat reads from one or more event logs using Windows APIs, filters the events based on user-configured criteria, then sends the event data to the configured outputs… Read More »