Install winlogbeat

# Test Winlogbeat Configuration

winlogbeat.exe test config -c winlogbeat.yml -e    

If you want to send to LOGSTASH instead directly to elastic:

...
...

#output.elasticsearch:
  # Array of hosts to connect to.
#  hosts: ["localhost:9200"]

...
...

output.logstash:
  # The Logstash hosts
  hosts: ["localhost:5044"]

...
...

Install/Uninstall Service:

# Install Service
.\install-service-winlogbeat.ps1

# Uninstall Service
.\uninstall-service-winlogbeat.ps1