Hi,
when I start filebeat.exe the Data gets log files are found and sent to elasticsearch.
But if I start filebeats as service from windows services, the logs show me no files found.
Best Regards
Son
Hi @Son_Pham,
Welcome! Do you see any errors or warnings in the logs when running as a Windows service? If not do you see any particular messages when in debug mode?
I did find this guide on setting up Filebeat as a Windows service, so it may be worth checking if you have followed similar steps in your setup.
Hope that helps!
Hi Carly,
the logs and debug mode don't show any errors. The service was also installed by the installer already.
It also opens and reads the config successfully.
Best REgards,
Son
Hi @Son_Pham,
are you sure the installed filebeat and the one you started manually are using the same configurations?
If it's the same configuration file, it does not matter from where filebeat runs, it'll do the same thing.
I does not seem to be your case, but anyway, let me explain it:
One thing that might happen is, being the configuration for 2 different runs the same, it means filebeat will keep track of what it already did. So if in the 1st run it collected all logs from a file, it won't collect the same logs again.
How is the config you're using to run it?
I believe the best to debug this situation is to have a test config point to a single active file and compare both runs. As I said, be sure the file is active, logs are being added to the file to ensure filebeat will keep reading it.
It was using the same config as I renamed the input to check in the logs. And both showed the changes I made to the config.
The problem was, that when run as a service on windows, it was not recognizing drives mounted through the network.
I see, so is it fixed now?