72 lines
2.1 KiB
Text
72 lines
2.1 KiB
Text
|
[[configuring-howto-winlogbeat]]
|
|||
|
|
= Configuring Winlogbeat
|
|||
|
|
|
|||
|
|
[partintro]
|
|||
|
|
--
|
|||
|
|
Before modifying configuration settings, make sure you've completed the
|
|||
|
|
<<winlogbeat-configuration,configuration steps>> in the Getting Started.
|
|||
|
|
This section describes some common use cases for changing configuration options.
|
|||
|
|
|
|||
|
|
To configure {beatname_uc}, you edit the configuration file. You’ll find the configuration file,
|
|||
|
|
+{beatname_lc}.yml+, in the archive that you extracted. There's also a full example configuration file at
|
|||
|
|
+/etc/{beatname_lc}/{beatname_lc}.reference.yml+ that shows all non-deprecated options.
|
|||
|
|
|
|||
|
|
The {beatname_uc} configuration file uses http://yaml.org/[YAML] for its syntax. See the
|
|||
|
|
{libbeat}/config-file-format.html[Config File Format] section of the
|
|||
|
|
_Beats Platform Reference_ for more about the structure of the config file.
|
|||
|
|
|
|||
|
|
The following topics describe how to configure Winlogbeat:
|
|||
|
|
|
|||
|
|
* <<configuration-winlogbeat-options>>
|
|||
|
|
* <<configuration-general-options>>
|
|||
|
|
* <<configuring-internal-queue>>
|
|||
|
|
* <<configuring-output>>
|
|||
|
|
* <<configuration-ssl>>
|
|||
|
|
* <<filtering-and-enhancing-data>>
|
|||
|
|
* <<configuring-ingest-node>>
|
|||
|
|
* <<configuration-path>>
|
|||
|
|
* <<setup-kibana-endpoint>>
|
|||
|
|
* <<configuration-dashboards>>
|
|||
|
|
* <<configuration-template>>
|
|||
|
|
* <<configuration-logging>>
|
|||
|
|
* <<using-environ-vars>>
|
|||
|
|
* <<yaml-tips>>
|
|||
|
|
* <<http-endpoint>>
|
|||
|
|
* <<{beatname_lc}-reference-yml>>
|
|||
|
|
|
|||
|
|
--
|
|||
|
|
|
|||
|
|
include::./winlogbeat-options.asciidoc[]
|
|||
|
|
|
|||
|
|
include::./winlogbeat-general-options.asciidoc[]
|
|||
|
|
|
|||
|
|
:win:
|
|||
|
|
include::../../libbeat/docs/queueconfig.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/outputconfig.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-ssl-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::./winlogbeat-filtering.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-config-ingest.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-path-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/shared-kibana-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/setup-config.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/loggingconfig.asciidoc[]
|
|||
|
|
|
|||
|
|
:standalone:
|
|||
|
|
include::../../libbeat/docs/shared-env-vars.asciidoc[]
|
|||
|
|
|
|||
|
|
:standalone:
|
|||
|
|
:win:
|
|||
|
|
include::../../libbeat/docs/yaml.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/http-endpoint.asciidoc[]
|
|||
|
|
|
|||
|
|
include::../../libbeat/docs/reference-yml.asciidoc[]
|