# Cannot start File beat in windows **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [January 10, 2017, 7:44pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143 "2017-01-10T19:44:20Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![Dharma\_Teja\_Koneru](https://avatars.discourse-cdn.com/v4/letter/d/b782af/32.png) [@Dharma\_Teja\_Koneru](https://discuss.elastic.co/u/Dharma_Teja_Koneru)\ **Post date:** [January 10, 2017, 7:44pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/1 "2017-01-10T19:44:20Z")
Hi, I'm trying to configure filebeat in windows 2012 R2 to send logs to a ubuntu server where the logstash and kibana are configured. when i try to start filebeat in windows i get the error: ERROR 1053: The service did not respond to the start or control request in timely fashion. when I run config test, it comes okay: PS C:\Program Files\Filebeat\> .\filebeat.exe -c filebeat.yml -configtest Config OK when I try to check in debug mode it works fine: PS C:\Program Files\Filebeat\> .\filebeat.exe -c filebeat.yml -e -v -d "\*" 2017/01/10 19:36:19.273991 beat.go:267: INFO Home path: [C:\Program Files\Filebeat] Config path: [C:\Program Files\Fileb eat] Data path: [C:\Program Files\Filebeat\data] Logs path: [C:\Program Files\Filebeat\logs] 2017/01/10 19:36:19.273991 beat.go:177: INFO Setup Beat: filebeat; Version: 5.1.1 2017/01/10 19:36:19.274990 processor.go:43: DBG Processors: 2017/01/10 19:36:19.274990 beat.go:183: DBG Initializing output plugins 2017/01/10 19:36:19.273991 logp.go:219: INFO Metrics logging every 30s 2017/01/10 19:36:19.274990 logstash.go:90: INFO Max Retries set to: 3 2017/01/10 19:36:19.274990 outputs.go:106: INFO Activated logstash as output plugin. 2017/01/10 19:36:19.274990 publish.go:234: DBG Create output worker 2017/01/10 19:36:19.274990 publish.go:276: DBG No output is defined to store the topology. The server fields might not be filled. 2017/01/10 19:36:19.275990 publish.go:291: INFO Publisher name: intercept-2012 2017/01/10 19:36:19.277990 async.go:63: INFO Flush Interval set to: 1s 2017/01/10 19:36:19.277990 async.go:64: INFO Max Bulk Size set to: 2048 2017/01/10 19:36:19.277990 async.go:72: DBG create bulk processing worker (interval=1s, bulk size=2048) 2017/01/10 19:36:19.277990 beat.go:207: INFO filebeat start running. 2017/01/10 19:36:19.277990 registrar.go:85: INFO Registry file set to: C:\Program Files\Filebeat\data\registry 2017/01/10 19:36:19.278991 registrar.go:106: INFO Loading registrar data from C:\Program Files\Filebeat\data\registry 2017/01/10 19:36:19.277990 service\_windows.go:51: DBG Windows is interactive: true 2017/01/10 19:36:19.279990 registrar.go:131: INFO States Loaded from registrar: 5 2017/01/10 19:36:19.280991 crawler.go:34: INFO Loading Prospectors: 1 2017/01/10 19:36:19.281990 prospector\_log.go:41: DBG exclude\_files: [] 2017/01/10 19:36:19.281990 state.go:64: DBG New state added for C:\Windows\System32\LogFiles\AGMedia\work.20170110kjjjj j.log But I'm not able to start the service. tried uninstalling and installing the service again with the ps1 but no luck. Please Help.!!! ---
**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Post date:** [January 12, 2017, 9:16am UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/2 "2017-01-12T09:16:45Z")
Are this all the lines you get in the log? Or do you have some more afterwards? If yes, could you share them in an gist? ---
**Author:** ![Dharma\_Teja\_Koneru](https://avatars.discourse-cdn.com/v4/letter/d/b782af/32.png) [@Dharma\_Teja\_Koneru](https://discuss.elastic.co/u/Dharma_Teja_Koneru)\ **Post date:** [January 12, 2017, 6:05pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/3 "2017-01-12T18:05:14Z")
here is the file: ---
**Author:** ![Dharma\_Teja\_Koneru](https://avatars.discourse-cdn.com/v4/letter/d/b782af/32.png) [@Dharma\_Teja\_Koneru](https://discuss.elastic.co/u/Dharma_Teja_Koneru)\ **Post date:** [January 12, 2017, 6:07pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/4 "2017-01-12T18:07:04Z")
When I run this: .\filebeat.exe -c filebeat.yml -e -v -d "\*" I can see the logs in kibana. but to run filebeat as a service, I have trouble. [https://gist.github.com/anonymous/db07f3154d394ebfbf325333e94d887d](https://gist.github.com/anonymous/db07f3154d394ebfbf325333e94d887d) ---
**Author:** ![maddin2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maddin2016/32/16599_2.png) [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Post date:** [January 12, 2017, 8:50pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/5 "2017-01-12T20:50:28Z")
Does the error throws directly after you start the service or after ~5~10 seconds? Can you also please post the start params for the service. ---
**Author:** ![maddin2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maddin2016/32/16599_2.png) [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Post date:** [January 12, 2017, 8:54pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/6 "2017-01-12T20:54:44Z")
Under which account the service is starting. LocalSystem?? Maybe the service account has no permission on the folder/file. Please check this too. ---
**Author:** ![Dharma\_Teja\_Koneru](https://avatars.discourse-cdn.com/v4/letter/d/b782af/32.png) [@Dharma\_Teja\_Koneru](https://discuss.elastic.co/u/Dharma_Teja_Koneru)\ **Post date:** [January 12, 2017, 10:29pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/7 "2017-01-12T22:29:22Z")
Thanks for your reply. I did everything under one account that is admin. the service doesn't start. I just get the error 1053. I see this when I check the properties of the service: "C:\Program Files\Filebeat\filebeat.exe" -c "C:\Program Files\Filebeat\filebeat.yml" -path.home "C:\Program Files\Filebeat" -path.data "C:\ProgramData\filebeat" ---
**Author:** ![maddin2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maddin2016/32/16599_2.png) [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Post date:** [January 13, 2017, 6:56am UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/8 "2017-01-13T06:56:56Z")
And the error pops up directly or with a delay? ---
**Author:** ![maddin2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maddin2016/32/16599_2.png) [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Post date:** [January 13, 2017, 9:54am UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/9 "2017-01-13T09:54:26Z")
What i meant is what account is explicitly set in the service. ---
**Author:** ![Dharma\_Teja\_Koneru](https://avatars.discourse-cdn.com/v4/letter/d/b782af/32.png) [@Dharma\_Teja\_Koneru](https://discuss.elastic.co/u/Dharma_Teja_Koneru)\ **Post date:** [January 13, 2017, 5:52pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/10 "2017-01-13T17:52:14Z")
There is no delay it comes up right away. the account is administrator ---
**Author:** ![maddin2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maddin2016/32/16599_2.png) [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Post date:** [January 13, 2017, 6:19pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/11 "2017-01-13T18:19:03Z")
Can you change the account to LocalSystem and try if this helps. ---
**Author:** ![Dharma\_Teja\_Koneru](https://avatars.discourse-cdn.com/v4/letter/d/b782af/32.png) [@Dharma\_Teja\_Koneru](https://discuss.elastic.co/u/Dharma_Teja_Koneru)\ **Post date:** [January 20, 2017, 11:53pm UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/12 "2017-01-20T23:53:46Z")
sorry for late reply. yes i tried with local account as well. but I still get the same error. ---
**Author:** ![maddin2016](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/maddin2016/32/16599_2.png) [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Post date:** [January 22, 2017, 11:41am UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/13 "2017-01-22T11:41:25Z")
Can you try to install in to another folder. Not `Programm Files`. Better on another drive. I think it is an rights management problem to start the service. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 19, 2017, 11:41am UTC](https://discuss.elastic.co/t/cannot-start-file-beat-in-windows/71143/14 "2017-02-19T11:41:59Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.