Choose what is sent back with sidecar(Windows)


(Gábor Iván) #1

Hello Guys

I have graylog set up and running, and from several servers i was able to send back logs with the sidecar. I’m a little worried though about the volume/network consumption, so I’d like to tone it a little down. Is there a way i could choose what catergory(security?) of logs get sent back?

Thank you for your answers


(Jochen) #2

Yes, you can use any setting Winlogbeats supports: https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-winlogbeat-options.html


(Gábor Iván) #3

Thank you very much for your answer, kind stranger :slight_smile: