I am having issues getting winlogbeat to start as a Windows service on my Windows 10 (1909) system. As you can see below, I am not getting any obvious errors when trying to install and start the Windows service. Just that the service will not start.
So i looked at the winlogbeat log file and am seeing this error:
2021-01-08T12:09:19.639-0800 INFO [monitoring] log/log.go:154 Uptime: 232.2918ms
2021-01-08T12:09:19.639-0800 INFO [monitoring] log/log.go:131 Stopping metrics logging.
2021-01-08T12:09:19.640-0800 INFO instance/beat.go:452 winlogbeat stopped.
2021-01-08T12:09:19.643-0800 ERROR instance/beat.go:956 Exiting: error connecting to Kibana: fail to load the TLS config: 2 errors: open /certs/lab.crt: The system cannot find the path specified. /certs/lab.crt; open /certs/ca.crt: The system cannot find the path specified. reading <nil>
So I changed my yaml to the full path of the certificates:
C:\elk\7.10.1\beats\winlogbeat-7.10.1-windows-x86_64>winlogbeat.exe test config -c .\winlogbeat.yml -e
Exiting: error loading config file: yaml: line 46: found unknown escape character
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.