Before modifying configuration settings, make sure you’ve completed the configuration steps in the Getting Started.

The Winlogbeat configuration file, winlogbeat.yml, uses YAML for its syntax. The configuration options are described in the following sections. After changing configuration settings, you need to restart Winlogbeat to pick up the changes.