Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix for rendering ForwardedEvents in Winlogbeat. #1891

Merged
merged 1 commit into from
Jun 21, 2016
Merged

Fix for rendering ForwardedEvents in Winlogbeat. #1891

merged 1 commit into from
Jun 21, 2016

Commits on Jun 20, 2016

  1. Fix for rendering ForwardedEvents in Winlogbeat. 

    When reading events from the ForwardedEvents log, Winlogbeat was always attempting to render the event locally event using messages files on the collector. This was wrong because the collector may not have the same message files as the source machine. It would result in a message_error if the collector machine was missing the application that originally logged the event on the source machine.

This PR changes Winlogbeat to not attempt to render the event on the collector machine, but instead use the event as is. This requires that the subscription for the Windows event collector uses the "RenderedText" format which includes the message string and any description strings with the forwarded event.
    @andrewkroh
    andrewkroh committed Jun 20, 2016
    Configuration menu
    Copy the full SHA
    5c30594 View commit details
    Browse the repository at this point in the history