# \[Help\] Help about Winogbeat service failure

**URL:** <https://discuss.elastic.co/t/help-help-about-winogbeat-service-failure/352283>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [February 1, 2024, 12:56pm UTC](https://discuss.elastic.co/t/help-help-about-winogbeat-service-failure/352283 "2024-02-01T12:56:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![YUUTA.INOUE-JPN](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yuuta.inoue-jpn/32/117963_2.png) [@YUUTA.INOUE-JPN](https://discuss.elastic.co/u/YUUTA.INOUE-JPN)\
**Post date:** [February 1, 2024, 12:56pm UTC](https://discuss.elastic.co/t/help-help-about-winogbeat-service-failure/352283/1 "2024-02-01T12:56:57Z")

</div>

Hello From Japan

Dear Elastic Engineers, I would like you to check a small problem that occurred in my environment.  
My environment is winlogbeat8.11 and I want to send Windows event viewer logs to Elaticsearch.  
The configuration including the server environment is as follows.

```auto
Client PC Windows10 - winlogbeat8.11
Server Ubuntu22.04 - Elasticsearch8.11& Kibana 8.11

```

I started the command prompt on the client PC with administrator privileges and was able to successfully install Winlogbeat.

```auto
[SC] DeleteService SUCCESS

Status Name Display Name
------ ---- -----------
Stopped winlogbeat winlogbeat

```

We have confirmed that information is successfully sent to Elasticsearch when you execute the command below.

```auto
winlogbeat.exe -c winlogbeat.yml -e

```

Everything is normal up to this point.  
But here comes the problem.

```auto
powershell -Command "start-service winlogbeat"

```

When I try to start Winlogbeat as a service, the following error occurs and the service is forced to close.

```auto
start-service : 次のエラーのため、サービス 'winlogbeat (winlogbeat)' を開始できません: コンピューター '.' でサービス 'w
inlogbeat' を開始できません。
発生場所 行:1 文字:1
+ start-service winlogbeat
+ ~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : OpenError: (System.ServiceProcess.ServiceController:ServiceController) [Start-Service],
   ServiceCommandException
    + FullyQualifiedErrorId : CouldNotStartService,Microsoft.PowerShell.Commands.StartServiceCommand

```

I am trying to solve this problem, but deciphering the error message is also not easy for me.  
we need your help  
Help me

Regards  
Thank you

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 29, 2024, 2:57pm UTC](https://discuss.elastic.co/t/help-help-about-winogbeat-service-failure/352283/2 "2024-02-29T14:57:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.