winlogbeat – Just Troubleshoot IT

Elasticsearch / ELK: winlogbeat configuration for Direct Access

Which logs to collect? To troubleshoot Direct Access and collect the important logs, you could use the following winlogbeat-Configuration