Windows events are not showing up in the log analytics UI.

Products

• DX Operational Intelligence

Issue/Introduction

Installed and configured standalone log collector on an Linux machine. The system events on the same Linux machine are showing up in the log analytics UI. Installed and configured Winlogbeat on a windows machine, but the windows events are not showing up in the log analytics UI. 

Cause

Environment was using unsupported releases of standalone log collector and Winlogbeat.

Resolution

Suggested customer to install both standalone log collector and Winlogbeat by downloading's from DX SAAS download which is supported releases. Also, identify that Winlogbeat is using the wrong tenant id. Once corrected the tenant id in Winlogbeat configuration file and restarted, the windows events logs from Winlogbeat started showing up in the log analytics UI.