Choose what is sent back with sidecar(Windows)

Hello Guys

I have graylog set up and running, and from several servers i was able to send back logs with the sidecar. I’m a little worried though about the volume/network consumption, so I’d like to tone it a little down. Is there a way i could choose what catergory(security?) of logs get sent back?

Thank you for your answers

Yes, you can use any setting Winlogbeats supports: Configure Winlogbeat | Winlogbeat Reference [8.11] | Elastic

Thank you very much for your answer, kind stranger :slight_smile: