Skip to content

Instantly share code, notes, and snippets.

@mazoutte
mazoutte / windows.yml
Last active September 12, 2023 12:56
Metricbeat 7.17.9 - Active Directory - All NTDS perfmon counters 2012R2/+ - DNS/KDC/Netlogon examples
### Tested with Metricbeat 7.17.9
### NTDS, DNS, KDC, Netlogon Counters
### Updates with new Perfmon Queries - mandatory in 8.x
### Fields format that would be generated : windows.perfmon.metrics.ntds_ab_anr_sec (dots are "renamed" to underscores under windows.perfmon.metrics.*)
### Now it's compliant with ECS field format, be careful with your actual metricbeat mapping templates.
- module: windows
metricsets: ["perfmon"]
period: 10s
perfmon.ignore_non_existent_counters: true