diff --git a/auditbeat/docs/getting-started.asciidoc b/auditbeat/docs/getting-started.asciidoc index c9e2636deb0..ea2a33f6c37 100644 --- a/auditbeat/docs/getting-started.asciidoc +++ b/auditbeat/docs/getting-started.asciidoc @@ -123,8 +123,7 @@ https://www.elastic.co/downloads/beats/{beatname_lc}[downloads page]. . Rename the +{beatname_lc}--windows+ directory to +{beatname_uc}+. . Open a PowerShell prompt as an Administrator (right-click the PowerShell icon -and select *Run As Administrator*). If you are running Windows XP, you may need -to download and install PowerShell. +and select *Run As Administrator*). . From the PowerShell prompt, run the following commands to install {beatname_uc} as a Windows service: diff --git a/filebeat/docs/getting-started.asciidoc b/filebeat/docs/getting-started.asciidoc index a18ad38bb25..e24f13c567d 100644 --- a/filebeat/docs/getting-started.asciidoc +++ b/filebeat/docs/getting-started.asciidoc @@ -122,7 +122,7 @@ https://www.elastic.co/downloads/beats/filebeat[downloads page]. . Rename the `filebeat--windows` directory to `Filebeat`. -. Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select *Run As Administrator*). If you are running Windows XP, you may need to download and install PowerShell. +. Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select *Run As Administrator*). . From the PowerShell prompt, run the following commands to install Filebeat as a Windows service: diff --git a/heartbeat/docs/getting-started.asciidoc b/heartbeat/docs/getting-started.asciidoc index d01f3789905..c51824e35ff 100644 --- a/heartbeat/docs/getting-started.asciidoc +++ b/heartbeat/docs/getting-started.asciidoc @@ -130,8 +130,7 @@ https://www.elastic.co/downloads/beats/heartbeat[downloads page]. . Rename the +heartbeat--windows+ directory to +Heartbeat+. . Open a PowerShell prompt as an Administrator (right-click the PowerShell icon -and select *Run As Administrator*). If you are running Windows XP, you may need -to download and install PowerShell. +and select *Run As Administrator*). . From the PowerShell prompt, run the following commands to install Heartbeat as a Windows service: diff --git a/libbeat/docs/dashboards.asciidoc b/libbeat/docs/dashboards.asciidoc index 3c76c4d91ca..7914d6700ea 100644 --- a/libbeat/docs/dashboards.asciidoc +++ b/libbeat/docs/dashboards.asciidoc @@ -67,8 +67,7 @@ endif::[] endif::allplatforms[] Open a PowerShell prompt as an Administrator (right-click the PowerShell icon -and select *Run As Administrator*). If you are running Windows XP, you may need -to download and install PowerShell. +and select *Run As Administrator*). From the PowerShell prompt, change to the directory where you installed {beatname_uc}, and run: diff --git a/libbeat/docs/shared-template-load.asciidoc b/libbeat/docs/shared-template-load.asciidoc index 7312da1f06c..fced5a162f8 100644 --- a/libbeat/docs/shared-template-load.asciidoc +++ b/libbeat/docs/shared-template-load.asciidoc @@ -176,8 +176,7 @@ endif::[] endif::allplatforms[] Open a PowerShell prompt as an Administrator (right-click the PowerShell icon -and select *Run As Administrator*). If you are running Windows XP, you may need -to download and install PowerShell. +and select *Run As Administrator*). From the PowerShell prompt, change to the directory where you installed {beatname_uc}, and run: diff --git a/metricbeat/docs/gettingstarted.asciidoc b/metricbeat/docs/gettingstarted.asciidoc index f1cb38012d1..e17b7c07207 100644 --- a/metricbeat/docs/gettingstarted.asciidoc +++ b/metricbeat/docs/gettingstarted.asciidoc @@ -130,8 +130,7 @@ https://www.elastic.co/downloads/beats/metricbeat[downloads page]. . Rename the `metricbeat--windows` directory to `Metricbeat`. . Open a PowerShell prompt as an Administrator (right-click the PowerShell icon -and select *Run As Administrator*). If you are running Windows XP, you may need -to download and install PowerShell. +and select *Run As Administrator*). . From the PowerShell prompt, run the following commands to install Metricbeat as a Windows service: diff --git a/packetbeat/docs/gettingstarted.asciidoc b/packetbeat/docs/gettingstarted.asciidoc index ec4d1595e92..cfdd3a10e91 100644 --- a/packetbeat/docs/gettingstarted.asciidoc +++ b/packetbeat/docs/gettingstarted.asciidoc @@ -126,7 +126,7 @@ https://www.elastic.co/downloads/beats/packetbeat[downloads page]. . Rename the `packetbeat--windows` directory to `Packetbeat`. -. Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select *Run As Administrator*). If you are running Windows XP, you may need to download and install PowerShell. +. Open a PowerShell prompt as an Administrator (right-click the PowerShell icon and select *Run As Administrator*). . From the PowerShell prompt, run the following commands to install Packetbeat as a Windows service: + diff --git a/winlogbeat/_meta/fields.yml b/winlogbeat/_meta/fields.yml index d86496bb2ba..cbae8b3a9f8 100644 --- a/winlogbeat/_meta/fields.yml +++ b/winlogbeat/_meta/fields.yml @@ -10,7 +10,7 @@ "wineventlog" for the Windows Event Log API or "eventlogging" for the Event Logging API. - The Event Logging API was designed for Windows Server 2003, Windows XP, + The Event Logging API was designed for Windows Server 2003 or Windows 2000 operating systems. In Windows Vista, the event logging infrastructure was redesigned. On Windows Vista or later operating systems, the Windows Event Log API is used. Winlogbeat automatically diff --git a/winlogbeat/docs/fields.asciidoc b/winlogbeat/docs/fields.asciidoc index 89fc00914d3..e6145bb301a 100644 --- a/winlogbeat/docs/fields.asciidoc +++ b/winlogbeat/docs/fields.asciidoc @@ -215,7 +215,7 @@ Contains common fields available in all event types. required: True The event log API type used to read the record. The possible values are "wineventlog" for the Windows Event Log API or "eventlogging" for the Event Logging API. -The Event Logging API was designed for Windows Server 2003, Windows XP, or Windows 2000 operating systems. In Windows Vista, the event logging infrastructure was redesigned. On Windows Vista or later operating systems, the Windows Event Log API is used. Winlogbeat automatically detects which API to use for reading event logs. +The Event Logging API was designed for Windows Server 2003 or Windows 2000 operating systems. In Windows Vista, the event logging infrastructure was redesigned. On Windows Vista or later operating systems, the Windows Event Log API is used. Winlogbeat automatically detects which API to use for reading event logs. -- diff --git a/winlogbeat/docs/getting-started.asciidoc b/winlogbeat/docs/getting-started.asciidoc index 3fbd7731710..c3068cd59c0 100644 --- a/winlogbeat/docs/getting-started.asciidoc +++ b/winlogbeat/docs/getting-started.asciidoc @@ -29,8 +29,7 @@ https://www.elastic.co/downloads/beats/winlogbeat[downloads page]. . Extract the contents into `C:\Program Files`. . Rename the `winlogbeat-` directory to `Winlogbeat`. . Open a PowerShell prompt as an Administrator (right-click on the PowerShell -icon and select Run As Administrator). If you are running Windows XP, you may -need to download and install PowerShell. +icon and select Run As Administrator). . From the PowerShell prompt, run the following commands to install the service. ["source","sh",subs="attributes,callouts"] diff --git a/winlogbeat/docs/overview.asciidoc b/winlogbeat/docs/overview.asciidoc index 1441b1f5df9..7da16c6334a 100644 --- a/winlogbeat/docs/overview.asciidoc +++ b/winlogbeat/docs/overview.asciidoc @@ -5,7 +5,7 @@ ++++ Winlogbeat ships Windows event logs to Elasticsearch or Logstash. You can -install it as a Windows service on Windows XP or later. +install it as a Windows service. Winlogbeat reads from one or more event logs using Windows APIs, filters the events based on user-configured criteria, then sends the event data to the