winlogbeat EventLog[Security] Open() error 收集不到安全类型日志

winlogbeat 最近收集不到AD上的  “安全” 类型日志了 查看了下winlogbeat的日志 

2017-11-01T11:30:25+08:00 INFO Connected to Elasticsearch version 5.4.0

2017-11-01T11:30:25+08:00 INFO Flush Interval set to: 1s

2017-11-01T11:30:25+08:00 INFO Max Bulk Size set to: 50

2017-11-01T11:30:25+08:00 INFO State will be read from and persisted to C:\ProgramData\winlogbeat\.winlogbeat.yml

2017-11-01T11:30:25+08:00 INFO winlogbeat start running.

[b]2017-11-01T11:30:25+08:00 WARN EventLog[Security] Open() error. No events will be read from this source. Access is denied.

[/b]2017-11-01T11:30:25+08:00 INFO Connected to Elasticsearch version 5.4.0

2017-11-01T11:30:25+08:00 INFO Template already exists and will not be overwritten.

有人遇到过么？ 
 
winlogbeat 配置用的都是默认的 直接output到es里面的
 

winlogbeat.event_logs:

  - name: Application

    ignore_older: 2h

  - name: Security

  - name: System