IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« PowerShell Module Sysmon Module »
Elastic Docs ›Winlogbeat Reference [8.12] ›Modules

Security Module

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Security Module

edit

The security module processes event log records from the Security log.

Configuration

edit
winlogbeat.event_logs:
  - name: Security

output.elasticsearch.pipeline: winlogbeat-%{[agent.version]}-routing

All module processing is handled via Elasticsearch Ingest Node pipelines. See Setup of Ingest Node pipelines for details.
« PowerShell Module Sysmon Module »