Couldn't start the Wmibeat as Windows Service

Elastic Stack Beats
1

Hi -
I've added the wmibeats as a service on a windows-7 server, when I tried to start the service, its throwing the below error:

Could you please let me know, how do I fix this issue ? I had put my configuration below:

############################# wmibeat ######################################

wmibeat:

Defines how often an event is sent to the output

period: 1s
enabled: true

classes:
- class: Win32_OperatingSystem
fields:
- FreePhysicalMemory
- FreeSpaceInPagingFiles
- FreeVirtualMemory
- NumberOfProcesses
- NumberOfUsers

- class: Win32_PerfFormattedData_PerfDisk_LogicalDisk
  fields:
  - Name
  - FreeMegabytes
  - PercentFreeSpace
  - PercentIdleTime
  - CurrentDiskQueueLength
  - DiskReadsPerSec
  - DiskWritesPerSec
  - DiskBytesPerSec
  - PercentDiskReadTime
  - PercentDiskWriteTime
  - PercentDiskTime
  whereclause: Name = "_Total"
  objecttitlecolumn: Name
 
- class: Win32_PerfFormattedData_PerfOS_Processor
  fields:
  - PercentPrivilegedTime
  - PercentInterruptTime
  - PercentProcessorTime
  - PercentUserTime 
  whereclause: Name = "_Total"   
 
- class: Win32_PerfFormattedData_PerfDisk_PhysicalDisk
  fields:
  - Name
  - PercentIdleTime
  - AvgDisksecPerRead
  - AvgDisksecPerWrite
  - AvgDiskQueueLength
  - DiskReadsPerSec
  - DiskWritesPerSec
  - DiskBytesPerSec
  - PercentDiskReadTime
  - PercentDiskWriteTime
  - PercentDiskTime
  whereclause: Name != "_Total"
  objecttitlecolumn: Name  
  
- class: Win32_PerfFormattedData_PerfOS_Memory
  fields:
  - CommittedBytes
  - AvailableBytes
  - PercentCommittedBytesInUse
  - CacheBytes
  objecttitlecolumn: Name

###############################################################################
############################# Libbeat Config ##################################

Base config file used by all other beats for using libbeat features

############################# Output ##########################################

Configure what outputs to use when sending the data collected by the beat.

Multiple outputs may be used.

output:

Elasticsearch as output

elasticsearch:
# Array of hosts to connect to.
# Scheme and port can be left out and will be set to the default (http and 9200)
# In case you specify and additional path, the scheme is required: http://localhost:9200/path
# IPv6 addresses should always be defined as: https://[2001:db8::1]:9200
hosts: ["localhost:9200"]

# Optional protocol and basic auth credentials.
#protocol: "https"
#username: "admin"
#password: "s3cr3t"

# Dictionary of HTTP parameters to pass within the url with index operations.
#parameters:
  #param1: value1
  #param2: value2

# Number of workers per Elasticsearch host.
#worker: 1

# Optional index name. The default is "wmibeat" and generates
# [wmibeat-]YYYY.MM.DD keys.
#index: "wmibeat-%{+yyyy.MM.dd}"

# A template is used to set the mapping in Elasticsearch
# By default template loading is disabled and no template is loaded.
# These settings can be adjusted to load your own template or overwrite existing ones
#template:

  # Template name. By default the template name is wmibeat.
  #name: "wmibeat"

  # Path to template file
  #path: "wmibeat.template.json"

  # Overwrite existing template
  #overwrite: true

# Optional HTTP Path
#path: "/elasticsearch"

# Proxy server url
#proxy_url: http://proxy:3128

# The number of times a particular Elasticsearch index operation is attempted. If
# the indexing operation doesn't succeed after this many retries, the events are
# dropped. The default is 3.
#max_retries: 3

# The maximum number of events to bulk in a single Elasticsearch bulk API index request.
# The default is 50.
#bulk_max_size: 50

# Configure http request timeout before failing an request to Elasticsearch.
#timeout: 90

# The number of seconds to wait for new events between two bulk API index requests.
# If `bulk_max_size` is reached before this interval expires, addition bulk index
# requests are made.
#flush_interval: 1

# Boolean that sets if the topology is kept in Elasticsearch. The default is
# false. This option makes sense only for Packetbeat.
#save_topology: false

# The time to live in seconds for the topology information that is stored in
# Elasticsearch. The default is 15 seconds.
#topology_expire: 15

# tls configuration. By default is off.
#tls:
  # List of root certificates for HTTPS server verifications
  #certificate_authorities: ["/etc/pki/root/ca.pem"]

  # Certificate for TLS client authentication
  #certificate: "/etc/pki/client/cert.pem"

  # Client Certificate Key
  #certificate_key: "/etc/pki/client/cert.key"

  # Controls whether the client verifies server certificates and host name.
  # If insecure is set to true, all server host names and certificates will be
  # accepted. In this mode TLS based connections are susceptible to
  # man-in-the-middle attacks. Use only for testing.
  #insecure: true

  # Configure cipher suites to be used for TLS connections
  #cipher_suites: []

  # Configure curve types for ECDHE based cipher suites
  #curve_types: []

  # Configure minimum TLS version allowed for connection to logstash
  #min_version: 1.0

  # Configure maximum TLS version allowed for connection to logstash
  #max_version: 1.2

Thanks !

2

As wmibeat is a community beat, I would recommend you to open an issue directly in the wmibeat repo so @eskibars can see it.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.