Winlogbeats

[Mike Riforgiate]

1. Download Winlogbeats (OSS Version) from https://www.elastic.co/downloads/beats/winlogbeat-oss
2. Edit the winlogbeat.yml attached in this article replacing WITFOOIP with the IP address of the WitFoo Precinct All-in-One Appliance or Streamer node.
3. Extract the file from step 1 onto the Windows machine that will be sending logs to WitFoo. The directory can be placed anywhere on the filesystem.
4. Place the edited winlogbeat.yml from step 2 into the folder created in step 3. This will replace the existing file in the directory.
5. Execute the install-service-winbeat.ps1 file in the directory.
6. Open the Services admin plugin in Windows and enable the Winbeats service and set it to start on boot.

 

winlogbeat

[Author]

Posts