IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« PowerShell Module Sysmon Module »
Elastic Docs ›Winlogbeat Reference [8.15] ›Modules

Security Module

edit

Security Module

edit

The security module processes event log records from the Security log.

Configuration

edit
winlogbeat.event_logs:
  - name: Security

output.elasticsearch.pipeline: winlogbeat-%{[agent.version]}-routing

All module processing is handled via Elasticsearch Ingest Node pipelines. See Setup of Ingest Node pipelines for details.
« PowerShell Module Sysmon Module »