winlogbeat.exe: which program is it?
winlogbeat.exe is a program file of Beats winlogbeat. It is installed together with the program and is how it is started from the command line.
| App | Publisher | Latest version | Default install folder |
|---|---|---|---|
 Beats winlogbeat | Elastic | 9.5.5 | %ProgramFiles%\Elastic\Beats\9.1.2\winlogbeat |
Frequently asked questions
Is winlogbeat.exe safe?
winlogbeat.exe is a normal part of Beats winlogbeat when it sits in the program's install folder and carries the publisher's digital signature. A file with the same name in another folder can be something else: check its signature and hash.
Where is winlogbeat.exe located?
By default the installer puts it in %ProgramFiles%\Elastic\Beats\9.1.2\winlogbeat. The folder can be changed during installation.
How do I remove winlogbeat.exe?
Uninstall Beats winlogbeat through Settings → Apps or with winget; the uninstaller removes winlogbeat.exe with it. Deleting the file alone leaves the rest of the program behind.