-
- Download Winlogbeats (OSS Version) from https://www.elastic.co/downloads/beats/winlogbeat-oss
- Edit the winlogbeat.yml attached in this article replacing WITFOOIP with the IP address of the WitFoo Precinct All-in-One Appliance or Streamer node.
- Extract the file from step 1 onto the Windows machine that will be sending logs to WitFoo. The directory can be placed anywhere on the filesystem.
- Place the edited winlogbeat.yml from step 2 into the folder created in step 3. This will replace the existing file in the directory.
- Execute the install-service-winbeat.ps1 file in the directory.
- Open the Services admin plugin in Windows and enable the Winbeats service and set it to start on boot.
winlogbeat
- You must be logged in to reply to this topic.