# Filebeats 8.10.2 as a service doesn't find any files

**URL:** <https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 7, 2025, 2:00pm UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873 "2025-04-07T14:00:15Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Son\_Pham](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/son_pham/32/142490_2.png) [@Son\_Pham](https://discuss.elastic.co/u/Son_Pham)\
**Post date:** [April 7, 2025, 2:00pm UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873/1 "2025-04-07T14:00:15Z")

</div>

Hi,

when I start filebeat.exe the Data gets log files are found and sent to elasticsearch.  
But if I start filebeats as service from windows services, the logs show me no files found.

Best Regards  
Son

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [April 8, 2025, 7:48am UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873/2 "2025-04-08T07:48:37Z")

</div>

Hi @Son_Pham,

Welcome! Do you see any errors or warnings in the logs when running as a Windows service? If not do you see any particular messages when in debug mode?

I did find [this guide](https://betterstack.com/community/questions/running-filebear-in-windows/) on setting up Filebeat as a Windows service, so it may be worth checking if you have followed similar steps in your setup.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![Son\_Pham](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/son_pham/32/142490_2.png) [@Son\_Pham](https://discuss.elastic.co/u/Son_Pham)\
**Post date:** [April 8, 2025, 8:23am UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873/3 "2025-04-08T08:23:33Z")

</div>

Hi Carly,

the logs and debug mode don't show any errors. The service was also installed by the installer already.  
It also opens and reads the config successfully.

Best REgards,  
Son

---

<div class="post-metadata">

**Author:** ![AndersonQ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andersonq/32/112214_2.png) [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\
**Post date:** [April 9, 2025, 12:24pm UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873/4 "2025-04-09T12:24:31Z")

</div>

Hi @Son_Pham,

are you sure the installed filebeat and the one you started manually are using the same configurations?

If it's the same configuration file, it does not matter from where filebeat runs, it'll do the same thing.

I does not seem to be your case, but anyway, let me explain it:  
One thing that might happen is, being the configuration for 2 different runs the same, it means filebeat will keep track of what it already did. So if in the 1st run it collected all logs from a file, it won't collect the same logs again.

How is the config you're using to run it?  
I believe the best to debug this situation is to have a test config point to a single active file and compare both runs. As I said, be sure the file is active, logs are being added to the file to ensure filebeat will keep reading it.

---

<div class="post-metadata">

**Author:** ![Son\_Pham](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/son_pham/32/142490_2.png) [@Son\_Pham](https://discuss.elastic.co/u/Son_Pham)\
**Post date:** [April 9, 2025, 11:09pm UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873/5 "2025-04-09T23:09:04Z")

</div>

It was using the same config as I renamed the input to check in the logs. And both showed the changes I made to the config.

The problem was, that when run as a service on windows, it was not recognizing drives mounted through the network.

---

<div class="post-metadata">

**Author:** ![AndersonQ](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andersonq/32/112214_2.png) [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\
**Post date:** [April 10, 2025, 8:25am UTC](https://discuss.elastic.co/t/filebeats-8-10-2-as-a-service-doesnt-find-any-files/376873/6 "2025-04-10T08:25:13Z")

</div>

I see, so is it fixed now?
