Skip to content

[Documentation] Clarify use case of Windows Event Logs across multiple integrations #12642

@mmahacek

Description

@mmahacek

There are multiple integrations that collect Windows Event logs, most notably system, windows, and winlog. While the winlog integration is designed for pulling logs from any defined channel, the system and windows integrations collect from a specific set of channels and apply some additional pipeline processing to make the data usable for observability and/or security purposes. Collecting the system event logs via the custom winlog integration will not apply the same pipelines, and would make the data less valuable to the user.

Documentation request:
Add a short paragraph to each of the three integrations (system, windows, winlog) to confirm the use case of that integration and a one or two sentence summary of the use case of the other integrations, so the user can decide which are best for their use case.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions