Custom Windows Event Logs - Integration

Custom Windows Event Logs 

 Collect and parse logs from any Windows event log channel with Elastic Agent. 

 The custom Windows event log package allows you to ingest events from any  Windows event log  channel. You can get a list of available event log channels by running  Get-WinEvent -ListLog * | Format-List -Property LogName  in PowerShell on Windows Vista or newer. If  Get-WinEvent  is not available,  Get-EventLog * may be used.  

 By executing this command in the powershell(administrator), it will list the log names that is being used. 

 

   

 Add a channel name in the Channel Name text field (e.g Application).