38 lines
824 B
Plaintext
38 lines
824 B
Plaintext
The `service` metricset of the Windows module reads the status of Windows
|
|
services.
|
|
|
|
[float]
|
|
=== Dashboard
|
|
|
|
The service metricset comes with a predefined dashboard. For example:
|
|
|
|
image::./images/metricbeat-windows-service.png[]
|
|
|
|
[float]
|
|
=== Configuration
|
|
|
|
[source,yaml]
|
|
----
|
|
- module: windows
|
|
metricsets: ["service"]
|
|
period: 60s
|
|
----
|
|
|
|
[float]
|
|
=== Filtering
|
|
|
|
Processors can be used to filter the events based on the service states or
|
|
their names. The example below configures the metricset to drop all events
|
|
except for the events for the firewall service. See
|
|
<<filtering-and-enhancing-data>> for more information about using processors.
|
|
|
|
[source,yaml]
|
|
----
|
|
- module: windows
|
|
metricsets: ["service"]
|
|
period: 60s
|
|
processors:
|
|
- drop_event.when.not.equals:
|
|
windows.service.display_name: Windows Firewall
|
|
----
|