Security Module

The security module processes event log records from the Security log.

winlogbeat.event_logs:
  - name: Security

output.elasticsearch.pipeline: winlogbeat-%{[agent.version]}-routing 1

1. All module processing is handled via Elasticsearch Ingest Node pipelines. See Setup of Ingest Node pipelines for details.