https://www.elastic.co/docs/reference/beats/winlogbeat/understand-winlogbeat-logs
Every 30 seconds (by default), Winlogbeat collects a snapshot of metrics about itself. From this snapshot, Winlogbeat computes a delta snapshot; this...
understandmetricswinlogbeatlogsbeats
https://www.elastic.co/docs/reference/beats/winlogbeat/configuring-howto-winlogbeat
To configure Winlogbeat, edit the configuration file. The default configuration file is called winlogbeat.yml. The location of the file varies by platform...
configurewinlogbeatbeats