fluent / fluent/fluent-plugin-windows-eventlog
Feature request: more keys or dynamic keys
Open
in_windows_eventlog(old)
- Dominant language
- Ruby
- Stars
- 32
- Forks
- 19
- Avg merge
- 2d 23h
- Merged PRs (30d)
- 1
Description
Hello,
The v0.14 fluentd MSI is great, much easier than the approach on v0.12, many thanks!
We've been comparing winlogbeat to fluent-plugin-windows-eventlog. One big disadvantage to fluentd is the small key/field list. Our particular use case involves the information in the event_data element for security events.
For now, I guess we're stuck with winlogbeat, but I might be able to contribute a PR in the future. Maybe a more dynamic XML to JSON approach would be feasible such that keys/fields are dynamically generated?
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.