Hi From the ListenBeats processor description: Listens for messages sent by libbeat compatible clients (e.g. filebeats, metricbeats, etc) using Libbeat's 'output.logstash', writing its JSON formatted payload to the content of a FlowFile.This processor replaces the now deprecated ListenLumberjack In other words, configure winlogbeats to ship to logstash and point it to the nifi processor and you should be good. Best regards Bob ... View more