Windows Events Inputs

Overview

This input type allows you to specify Windows Events channels for Edge Delta to monitor.

Review Sample Configuration

Review the following sample configuration:

  winevents:
    - channel: "Application"
      labels: "errorcheck"
    - channel: "Security"
      labels: "errorcheck"
    - channel: "System"
      labels: "errorcheck"
    - channel: "Setup"
      labels: "errorcheck"

Review Parameters

Review the following parameters that you can configure in the Edge Delta App. 

labels

Required

Enter a descriptive label for this input. 

When you create a workflow, you will use this label to enter your input into the workflow. 

errorcheck is the default label. 

Review the following example: 

labels: "errorcheck"

channel

Required

Select the Windows channel that the agent should collect from:

• Application
• Security 
• System
• Setup

Review the following example: 

channel: "Application"

filters

Optional 

Select an existing filter to add to this input. 

To learn how to create a filter, see Filters.

Review the following example: 

filters:
  - info