I am Using Winlogbeat Sidecar’s on some Windows Server with the standard Configuration name: Application ignore_older: 720h name: System ignore_older: 720h name: Security ignore_older: 720h in the Stream Configuration i have simple rule Source == “Windows Server Name” to use in a Dashboa…

[image] gsmith: If this post is completed could you mark this as resolved for future search’s? I have more questions, but that’s for another discussion, thanks again for your help.

Best Praxis? Sidecar -> Stream ->Dashboard

Graylog Central (peer support)

Matthias23 (Matthias) April 30, 2022, 7:54pm 15

I have more questions, but that’s for another discussion, thanks again for your help.

1 Like

Topic		Replies	Views
Windows Event (Winlogbeat) Exclude User Graylog Central (peer support) sidecar , winlogbeat	8	2273	March 16, 2021
Multi Part Rule within Streams Graylog Central (peer support) pipeline-rules , route-to-streampl , sidecar , winlogbeat	5	1603	July 31, 2020
Filter options for Live Monitoring Graylog Central (peer support) sidecar	2	1261	May 21, 2020
Change Winlogbeat Field Names Graylog Central (peer support) pipeline-rules , sidecar , winlogbeat	5	2623	April 4, 2017
Winlogbeat "publishes" fine but specific events aren't seen in Graylog Graylog Central (peer support) sidecar , winlogbeat	1	1067	April 13, 2021

Best Praxis? Sidecar -> Stream ->Dashboard

Related topics