EXE works, service doesn't (Socket permissions)

[JRSol]

Hi folks,

Winlogbeat is working wonderfully when I start the exe, with all the features I need, such as SSL, but when I try to run it as a service it fails.

I've then collected some logs and it seems the service is lacking permissions to access the socket.
Unfortunately, our hoster set the language to german, so the error is in german as well:

ERR Failed to connect to ****: connectex: Der Zugriff auf einen Socket war aufgrund der Zugriffsrechte des Sockets unzulässig

I'm gonna add that this is a server that is restricted with firewall rules pretty heavily, but I have created rules to allow communication on the exe as well as on the service.

Anybody ran into this problem? It seems to me you'd have to allow the service to communicate over the network?

Cheers,
JR

[JRSol]

okay, I can already tell it's the firewall.
I'll post when I find out which user/service/whatever I have to allow in the firewall.

Thought it would be pretty foolproof with the service rule, but apparently not.

[andrewkroh]

Either I haven't seen this error or it doesn't not translate close enough to the English error that I recognize it. Perhaps @maddin2016 has some insight.

On a related not I would like to improve the installation process to better handle a lot of the common issues people encounter such as firewall rules.

[JRSol]

Hi @andrewkroh,
meanwhile I have (kind of) solved it:

In the properties of a service you can specify what user to run it under. Set this, modify firewall rule to allow that user, done.

if you put just the exe into the rule it will not work and for some reason specifying the service name does not work either in my case.

So I guess there's some work to be done on the install-as-service script.