Skip to content

Instantly share code, notes, and snippets.

@moretalk
Created September 20, 2016 10:27
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save moretalk/498f5f400e31fa13661c6419768cc6c3 to your computer and use it in GitHub Desktop.
Save moretalk/498f5f400e31fa13661c6419768cc6c3 to your computer and use it in GitHub Desktop.
winlogbeat:
registry_file: "C:/Program Files/winlogbeat/winlogbeat.yml"
event_logs:
- name: Application
ignore_older: 72h
- name: System
ignore_older: 72h
- name: Security
ignore_older: 72h
---
output:
logstash:
hosts:
- "XXXX.com:5045"
loadbalance: true
shipper: {}
logging: {}
runoptions: {}
@claflico
Copy link

Are you getting anything before the initial winlogbeat:? I'd like to know which template file is getting used.

What version of puppet are you using?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment