Specifically the status reporting in winlog causes the winlog input to be degraded as when agent is privileged (i.e. the default configuration) when the Sysmon operational channel is missing (also true by default because it is not a core Windows component).
This is an automatic backport of pull request #41468 done by Mergify.
Revert https://github.com/elastic/beats/issues/40543 because of https://github.com/elastic/elastic-agent/issues/5746.
Specifically the status reporting in winlog causes the winlog input to be degraded as when agent is privileged (i.e. the default configuration) when the Sysmon operational channel is missing (also true by default because it is not a core Windows component).
This is an automatic backport of pull request #41468 done by Mergify.