fluent/fluent-plugin-windows-eventlog

unable to forward event logs

vhdevera opened this issue · 1 comments

I'd like to forward the event logs of our Win2012 to Fluentd (on a linux server)
I used fluent-plugin-windows-eventlog but its not forwarding and the json file seems incomplete.

The json file output only contains
{"application":[15007,1],"system":[87037,41414],"security":[57655871,1]}

I was hoping to get something like:

{
"channel":"security",
"record_number":"91698",
"time_generated":"2017-08-29 20:12:29 +0000",
"time_written":"2017-08-29 20:12:29 +0000",

Attached config is what I'm using (not really sure of this config since fluentd is new to me)

{"application":[15007,1],"system":[87037,41414],"security":[57655871,1]}

This is the content of position file, right?