efi-k / winlogbeat2splunk Public

Notifications You must be signed in to change notification settings
Fork 2
Star 1

Local config files for splunk Windows Add-On

1 star 2 forks Branches Tags Activity

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
README.md		README.md
props.conf		props.conf
transforms.conf		transforms.conf

Repository files navigation

winlogbeat2splunk

Local config files for splunk Windows Add-On

Download Winlogbeat: https://www.elastic.co/downloads/beats/winlogbeat

Make sure you use logstash output with compression level set to 0: https://www.elastic.co/guide/en/beats/winlogbeat/current/logstash-output.html#_compression_level_2