I’m having an issue with Graylog CE. I have Sidecars configured with Winlogbeat, and everything works correctly when using the default configuration. However, when I add a processors block, I stop receiving logs — even though I’m actively generating the specified events.
Could you please assist? I’m attaching the current Winlogbeat configuration file as well.
Best regards,
K. Zlatev