# Ingest Windows eventlog: NXlog or Winlogbeat?

**URL:** <https://community.graylog.org/t/ingest-windows-eventlog-nxlog-or-winlogbeat/19554>\
**Category:** Graylog Central (peer support)\
**Tags:** sidecar, winlogbeat\
**Created:** [April 21, 2021, 9:05am UTC](https://community.graylog.org/t/ingest-windows-eventlog-nxlog-or-winlogbeat/19554 "2021-04-21T09:05:06Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![cdarsac](https://avatars.discourse-cdn.com/v4/letter/c/dec6dc/32.png) [@cdarsac](https://community.graylog.org/u/cdarsac)\
**Post date:** [April 21, 2021, 9:05am UTC](https://community.graylog.org/t/ingest-windows-eventlog-nxlog-or-winlogbeat/19554/1 "2021-04-21T09:05:07Z")

</div>

Hello the Forum !

For Ingesting Windows eventlog, I have trouble choosing between NXlog and Winlogbeat.

What do you advise me, knowing that I am looking for the simplest solution to implement?

Thank you in advance.

---

<div class="post-metadata">

**Author:** ![H2Cyber](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/h2cyber/32/12536_2.png) [@H2Cyber](https://community.graylog.org/u/H2Cyber)\
**Post date:** [April 21, 2021, 7:02pm UTC](https://community.graylog.org/t/ingest-windows-eventlog-nxlog-or-winlogbeat/19554/2 "2021-04-21T19:02:15Z")

</div>

Winlogbeat, which is already wrapped inside Sidecar. Sidecar would give you central management from Graylog :

1. Get the latest Sidecar executable from : [Releases · Graylog2/collector-sidecar · GitHub](https://github.com/Graylog2/collector-sidecar/releases)
2. Install the Sidecar on your Windows system (which includes Winlogbeat) : [Graylog Sidecar — Graylog 4.0.0 documentation](https://docs.graylog.org/en/4.0/pages/sidecar.html#windows)
3. Follow the step by step guide to configure it : [Graylog Sidecar — Graylog 4.0.0 documentation](https://docs.graylog.org/en/4.0/pages/sidecar.html#step-by-step-guide)
4. Enjoy 🙂

---

<div class="post-metadata">

**Author:** ![rfinney](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/rfinney/32/961_2.png) [@rfinney](https://community.graylog.org/u/rfinney)\
**Post date:** [April 23, 2021, 8:52pm UTC](https://community.graylog.org/t/ingest-windows-eventlog-nxlog-or-winlogbeat/19554/3 "2021-04-23T20:52:56Z")

</div>

Winlogbeat. Easy to use and setup.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [May 7, 2021, 8:53pm UTC](https://community.graylog.org/t/ingest-windows-eventlog-nxlog-or-winlogbeat/19554/4 "2021-05-07T20:53:07Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.