Can we run Logstash in Windows ? If so how to write conf file for it ?

[#1]

I think all the elastic beats work on both windows and unix, but you should check out winlogbeat for windows log processing:

https://www.elastic.co/downloads/beats/winlogbeat

In my use cases we used packetbeat, filebeat, metricbeat, and winlogbeat on windows machines.

As for configs, they are very easy and should work out of the box with minor modifications.

Start with stock config file and go through line by line.

If this answer is helpful please ACCEPT to make your question answered.