# Couldn't start the Wmibeat as Windows Service

**URL:** <https://discuss.elastic.co/t/couldnt-start-the-wmibeat-as-windows-service/78829>\
**Category:** Beats\
**Created:** [March 16, 2017, 9:31am UTC](https://discuss.elastic.co/t/couldnt-start-the-wmibeat-as-windows-service/78829 "2017-03-16T09:31:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![prakash1243](https://avatars.discourse-cdn.com/v4/letter/p/35a633/32.png) [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Post date:** [March 16, 2017, 9:31am UTC](https://discuss.elastic.co/t/couldnt-start-the-wmibeat-as-windows-service/78829/1 "2017-03-16T09:31:47Z")

</div>

Hi -  
I've added the wmibeats as a service on a windows-7 server, when I tried to start the service, its throwing the below error:

![](https://us1.discourse-cdn.com/elastic/original/3X/7/2/72fe37e18c02befe50d1c026d736a3186b584226.png)

Could you please let me know, how do I fix this issue ? I had put my configuration below:

############################# wmibeat ######################################

wmibeat:

# Defines how often an event is sent to the output

period: 1s  
enabled: true

classes:  
- class: Win32\_OperatingSystem  
fields:  
- FreePhysicalMemory  
- FreeSpaceInPagingFiles  
- FreeVirtualMemory  
- NumberOfProcesses  
- NumberOfUsers

```
- class: Win32_PerfFormattedData_PerfDisk_LogicalDisk
  fields:
  - Name
  - FreeMegabytes
  - PercentFreeSpace
  - PercentIdleTime
  - CurrentDiskQueueLength
  - DiskReadsPerSec
  - DiskWritesPerSec
  - DiskBytesPerSec
  - PercentDiskReadTime
  - PercentDiskWriteTime
  - PercentDiskTime
  whereclause: Name = "_Total"
  objecttitlecolumn: Name
 
- class: Win32_PerfFormattedData_PerfOS_Processor
  fields:
  - PercentPrivilegedTime
  - PercentInterruptTime
  - PercentProcessorTime
  - PercentUserTime 
  whereclause: Name = "_Total"   
 
- class: Win32_PerfFormattedData_PerfDisk_PhysicalDisk
  fields:
  - Name
  - PercentIdleTime
  - AvgDisksecPerRead
  - AvgDisksecPerWrite
  - AvgDiskQueueLength
  - DiskReadsPerSec
  - DiskWritesPerSec
  - DiskBytesPerSec
  - PercentDiskReadTime
  - PercentDiskWriteTime
  - PercentDiskTime
  whereclause: Name != "_Total"
  objecttitlecolumn: Name  
  
- class: Win32_PerfFormattedData_PerfOS_Memory
  fields:
  - CommittedBytes
  - AvailableBytes
  - PercentCommittedBytesInUse
  - CacheBytes
  objecttitlecolumn: Name  

```

###############################################################################  
############################# Libbeat Config ##################################

# Base config file used by all other beats for using libbeat features

############################# Output ##########################################

# Configure what outputs to use when sending the data collected by the beat.

# Multiple outputs may be used.

output:

### Elasticsearch as output

elasticsearch:  
# Array of hosts to connect to.  
# Scheme and port can be left out and will be set to the default (http and 9200)  
# In case you specify and additional path, the scheme is required: [http://localhost:9200/path](http://localhost:9200/path)  
# IPv6 addresses should always be defined as: https://[2001:db8::1]:9200  
hosts: ["localhost:9200"]

```
# Optional protocol and basic auth credentials.
#protocol: "https"
#username: "admin"
#password: "s3cr3t"

# Dictionary of HTTP parameters to pass within the url with index operations.
#parameters:
  #param1: value1
  #param2: value2

# Number of workers per Elasticsearch host.
#worker: 1

# Optional index name. The default is "wmibeat" and generates
# [wmibeat-]YYYY.MM.DD keys.
#index: "wmibeat-%{+yyyy.MM.dd}"

# A template is used to set the mapping in Elasticsearch
# By default template loading is disabled and no template is loaded.
# These settings can be adjusted to load your own template or overwrite existing ones
#template:

  # Template name. By default the template name is wmibeat.
  #name: "wmibeat"

  # Path to template file
  #path: "wmibeat.template.json"

  # Overwrite existing template
  #overwrite: true

# Optional HTTP Path
#path: "/elasticsearch"

# Proxy server url
#proxy_url: http://proxy:3128

# The number of times a particular Elasticsearch index operation is attempted. If
# the indexing operation doesn't succeed after this many retries, the events are
# dropped. The default is 3.
#max_retries: 3

# The maximum number of events to bulk in a single Elasticsearch bulk API index request.
# The default is 50.
#bulk_max_size: 50

# Configure http request timeout before failing an request to Elasticsearch.
#timeout: 90

# The number of seconds to wait for new events between two bulk API index requests.
# If `bulk_max_size` is reached before this interval expires, addition bulk index
# requests are made.
#flush_interval: 1

# Boolean that sets if the topology is kept in Elasticsearch. The default is
# false. This option makes sense only for Packetbeat.
#save_topology: false

# The time to live in seconds for the topology information that is stored in
# Elasticsearch. The default is 15 seconds.
#topology_expire: 15

# tls configuration. By default is off.
#tls:
  # List of root certificates for HTTPS server verifications
  #certificate_authorities: ["/etc/pki/root/ca.pem"]

  # Certificate for TLS client authentication
  #certificate: "/etc/pki/client/cert.pem"

  # Client Certificate Key
  #certificate_key: "/etc/pki/client/cert.key"

  # Controls whether the client verifies server certificates and host name.
  # If insecure is set to true, all server host names and certificates will be
  # accepted. In this mode TLS based connections are susceptible to
  # man-in-the-middle attacks. Use only for testing.
  #insecure: true

  # Configure cipher suites to be used for TLS connections
  #cipher_suites: []

  # Configure curve types for ECDHE based cipher suites
  #curve_types: []

  # Configure minimum TLS version allowed for connection to logstash
  #min_version: 1.0

  # Configure maximum TLS version allowed for connection to logstash
  #max_version: 1.2

```

Thanks !

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [March 17, 2017, 9:45am UTC](https://discuss.elastic.co/t/couldnt-start-the-wmibeat-as-windows-service/78829/2 "2017-03-17T09:45:36Z")

</div>

As wmibeat is a community beat, I would recommend you to open an issue directly in the wmibeat repo so @eskibars can see it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 6, 2017, 9:32am UTC](https://discuss.elastic.co/t/couldnt-start-the-wmibeat-as-windows-service/78829/3 "2017-04-06T09:32:13Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
