{
  "repo": "elastic/beats",
  "binary": "winlogbeat",
  "binary_path": "winlogbeat/main.go",
  "surface_kind": "worker_service",
  "type": "worker_service",
  "extensions": {
    "notes": [
      "winlogbeat/main.go executes cmd.RootCmd and runs as a long-lived beat process.",
      "The previous unknown role was stale."
    ]
  },
  "services": [
    {
      "name": "Winlogbeat",
      "package": "github.com/elastic/beats/v7/winlogbeat/cmd",
      "methods": [
        {
          "name": "winlogbeat",
          "name_key": "Winlogbeat.Run",
          "input": "cobra flags + Windows event log sources + outputs",
          "output": "continuous collection and shipping of Windows event logs",
          "type": "worker"
        }
      ]
    }
  ]
}