From fab1a9072452fd7268a5f3a9164a556a6ddfa87e Mon Sep 17 00:00:00 2001 From: Meissner Morales <115506119+c0d3fau1t@users.noreply.github.com> Date: Mon, 3 Feb 2025 12:52:28 -0500 Subject: [PATCH] Update windows-event-log-winevtlog.md Added documentation for "ignore_missing_channels" in WinevtLogs input Signed-off-by: Meissner Morales <115506119+c0d3fau1t@users.noreply.github.com> --- pipeline/inputs/windows-event-log-winevtlog.md | 1 + 1 file changed, 1 insertion(+) diff --git a/pipeline/inputs/windows-event-log-winevtlog.md b/pipeline/inputs/windows-event-log-winevtlog.md index c570009d2..07c2eeaf6 100644 --- a/pipeline/inputs/windows-event-log-winevtlog.md +++ b/pipeline/inputs/windows-event-log-winevtlog.md @@ -15,6 +15,7 @@ The plugin supports the following configuration parameters: | DB | Set the path to save the read offsets. \(optional\) | | | String\_Inserts | Whether to include StringInserts in output records. \(optional\) | True | | Render\_Event\_As\_XML | Whether to render system part of event as XML string or not. \(optional\) | False | +| Ignore\_Missing\_Channels | Whether to ignore event channels not present in the event log and keep running with channels that could be subscribed to. \(optional\) | False | | Use\_ANSI | Use ANSI encoding on eventlog messages. If you have issues receiving blank strings with old Windows versions (Server 2012 R2), setting this to True may solve the problem. \(optional\) | False | | Event\_Query | Specify XML query for filtering events. | `*` | | Read\_Limit\_Per\_Cycle | Specify read limit per cycle. | 512KiB |