Skip to content

[Documentation] Clarify use case of Windows Event Logs across multiple integrations #12642

@mmahacek

Description

@mmahacek

There are multiple integrations that collect Windows Event logs, most notably system, windows, and winlog. While the winlog integration is designed for pulling logs from any defined channel, the system and windows integrations collect from a specific set of channels and apply some additional pipeline processing to make the data usable for observability and/or security purposes. Collecting the system event logs via the custom winlog integration will not apply the same pipelines, and would make the data less valuable to the user.

Documentation request:
Add a short paragraph to each of the three integrations (system, windows, winlog) to confirm the use case of that integration and a one or two sentence summary of the use case of the other integrations, so the user can decide which are best for their use case.

Metadata

Metadata

Assignees

No fields configured for Enhancement.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions