You can use the Elastic Stack monitoring features to gain insight into the health of Winlogbeat instances running in your environment.
To monitor Winlogbeat, make sure monitoring is enabled on your Elasticsearch cluster, then configure the method used to collect Winlogbeat metrics. You can use one of following methods:
- Internal collection - Internal collectors send monitoring data directly to your monitoring cluster.
- Metricbeat collection - Metricbeat collects monitoring data from your Winlogbeat instance and sends it directly to your monitoring cluster.
- Legacy collection (deprecated) - Legacy collectors send monitoring data to your production cluster.