Security Module [winlogbeat-module-security]

The security module processes event log records from the Security log.

Configuration [_configuration_3]

winlogbeat.event_logs:
  - name: Security

output.elasticsearch.pipeline: winlogbeat-%{[agent.version]}-routing <1>

1. All module processing is handled via Elasticsearch Ingest Node pipelines. See Setup of Ingest Node pipelines for details.