Hi,
Is it possible to exclude a specific event_id in the winlogbeat configuration?
The processors block should be expanded so that it looks similar to:
processors: