Initialization error for Windows input using Edge

The following error occurs with the Windows input on Edge:


{
  "time": "2022-06-29T16:04:24.188Z",
  "cid": "w0",
  "channel": "input:in_win_event_logs",
  "level": "error",
  "message": "Initialization error: Source is not allowed in this deployment",
  "error": {
    "message": "Source is not allowed in this deployment",
    "stack": "Error: Source is not allowed in this deployment\n    at g.init (/opt/cribl/bin/cribl.js:14:11996546)"
  }
}
1 UpGoat

This issue occurs when the configs are pushed to nodes not running on Windows. It’s best to deploy separate fleets for Windows and Linux based nodes.

2 UpGoats