How to install Winlogbeat on Windows
PS C:\Program Files\Winlogbeat> .\install-service-winlogbeat.ps1
-- 如果在系统上禁用了脚本执行，则需要为当前会话设置执行策略以允许脚本运行
PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-winlogbeat.ps1
PS C:\Program Files\Winlogbeat> set-executionpolicy remotesigned
PS C:\Program Files\Winlogbeat> set-executionpolicy Bypass
PS C:\Program Files\Winlogbeat> .\winlogbeat.exe test config -c .\winlogbeat.yml -e
PS C:\Program Files\Winlogbeat> Start-Service winlogbeat
PS C:\Program Files\Winlogbeat> Get-Process | findstr winlogbe
Reference
[https://www.jianshu.com/p/1e4266af6202]
[https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-overview.html]
[https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-quickstart.html]
[https://www.elastic.co/guide/en/beats/filebeat/current/directory-layout.html]
[https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-getting-started.html]
[https://www.elastic.co/cn/downloads/beats/winlogbeat]
[https://blog.csdn.net/vip100549/article/details/79592409]
[https://blog.csdn.net/weixin_40467243/article/details/80562495]