Hi @Stefan Kupstaitis-Dunkler
I Installed winlogbeats on Windows workstation with below config :
and I use this nifi processors to stream event to metron:
listenbeats config :
Publishkafka cofig :
Nifi Data provenance in publishkafka processor :
I create sensor in Management UI with logstash parser and winlogtop
topic ( kafka):
Event transfered fast to Listenbeats processor but transfer from queue to publishkafka is very very slow or zero and output of publishkafka is zero .
is it Nifi data provenance log is normal ?
now I can't see any log data in alert UI or kibana . what's