Hi Jiří, On Friday, 6 January 2017 22:44:47 UTC+1, Jiří Kolb wrote: > > I would like to capture logs from windows. I installed winlogbeats and > configured beats input on graylog. I can see that connection is > estabilished, but I receive no answer. I used wireshark and curl to debug > this, but for HTTP GET I receive no response. How to debug beats input on > graylog? >
The easiest way to get this working is probably by using the Graylog Collector Sidecar: http://docs.graylog.org/en/2.1/pages/collector_sidecar.html I don't know what you mean by HTTP GET, because the Beats protocol is a proprietary binary protocol and has nothing to do with HTTP. You can start Winlogbeat in debugging mode and see exactly what it's doing. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/099c5f01-41fc-4bfc-befd-5b4e26978d21%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.