You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For Windows platforms prior to Windows Vista, the parameters in event log messages were unnamed
Therefore, for those platforms, the output fields that appear under event_data are named param1, param2, param3, param4, etc.
For Windows platforms prior to Windows Vista, the parameters in event log messages were unnamed
Therefore, for those platforms, the output fields that appear under event_data are named param1, param2, param3, param4, etc.
See https://discuss.elastic.co/t/windows-2003-winlogbeat-x32-alpha4/57386/2
Clarification about this needs to be added here: https://www.elastic.co/guide/en/beats/winlogbeat/master/exported-fields-eventlog.html#_event_data
And perhaps an FAQ topic should also be added.
The text was updated successfully, but these errors were encountered: