Error Registry File

Elastic Stack Beats
#1

Hi everyone,

I have an issue with Filebeat in Windows. Sometimes, when the computer is rebooted, Filebeat is not able to start. I see in the log the next error:

2017-03-30T11:06:31+01:00 ERR Error decoding old state: invalid character '\x00' looking for beginning of value

I am using Filebeat 5.2.2 and Windows 7. I set in the configuration the registry file's path:

filebeat.registry_file: c:/filebeat/data/filebeat

Thanks in advance,

Regards

#2

Can you post what's inside the registry file. \x00 is a null character. Maybe the file was not properly closed while shutdown.

1 Like
#3

I had similar problems if a file file is formatted as UTF-16. Can you try to open the file with notepad and explicitly save it as UFT-8. Then reboot your machine and see if the error still occurs.

#4

This sounds like you are encountering this issue: https://github.com/elastic/beats/issues/3537

Try 5.3.0 and see if it reoccurs.

1 Like
#5

Hi,

I am going to test with Filebeat 5.3.0.

Thank very much :slight_smile:

Regards

#6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.