# Installation of filebeat 5.3.1 in windows 10?

**URL:** https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594
**Category:** Beats
**Tags:** filebeat
**Created:** [April 25, 2017, 4:29pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594 "2017-04-25T16:29:16Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [April 25, 2017, 4:29pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/1 "2017-04-25T16:29:16Z")

</div>

Hi,

I installed filebeat in `F:\filebeat-5.3.1-windows-x86_64\Filebeat` when i executed the `install-service-filebeat.ps1` in powershell it opened and closed immediately i dont know why this is happening ?

Even i changed the path.data to `F:\filebeat-5.3.1-windows-x86_64\Filebeat` in `install-service-filebeat.ps1` file.

Thanks

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [April 25, 2017, 4:47pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/2 "2017-04-25T16:47:43Z")

</div>

Did you follow the [Getting Started Guide](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-getting-started.html)?

---

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [April 25, 2017, 5:28pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/3 "2017-04-25T17:28:09Z")

</div>

Yeah i followed the guide but i pasted in different folder rather than C . I think i won't be a problem. The problem is i cant able to run the script in powershell whenever i am trying to run the powershell is opening and closing without showing any error.

Thanks

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [April 25, 2017, 5:43pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/4 "2017-04-25T17:43:35Z")

</div>

How are you executing the `install-service-filebeat.ps1` script?

You should open a PowerShell console. `cd` to the dir containing the script. Then execute `PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-filebeat.ps1`.

---

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [April 25, 2017, 5:58pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/5 "2017-04-25T17:58:21Z")

</div>

Thanks

I went through like this

```
Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.

PS C:\WINDOWS\system32> cd F:\filebeat-5.3.1-windows-x86_64\filebeat
PS F:\filebeat-5.3.1-windows-x86_64\filebeat> dir

    Directory: F:\filebeat-5.3.1-windows-x86_64\filebeat

Mode LastWriteTime Length Name
---- ------------- ------ ----
d----- 17-04-2017 15:30 module
d----- 17-04-2017 15:44 scripts
-a---- 17-04-2017 15:43 41 .build_hash.txt
-a---- 17-04-2017 15:44 16101376 filebeat.exe
-a---- 17-04-2017 15:44 37050 filebeat.full.yml
-a---- 17-04-2017 15:44 15641 filebeat.template-es2x.json
-a---- 17-04-2017 15:44 12745 filebeat.template.json
-a---- 17-04-2017 15:44 4310 filebeat.yml
-a---- 17-04-2017 15:44 507 install-service-filebeat.ps1
-a---- 17-04-2017 15:42 97026 NOTICE
-a---- 17-04-2017 15:43 811 README.md
-a---- 17-04-2017 15:44 184 uninstall-service-filebeat.ps1

PS F:\filebeat-5.3.1-windows-x86_64\filebeat> PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-fileb
eat.ps1
PowerShell.exe : The term 'PowerShell.exe' is not recognized as the name of a cmdlet, function, script file, or
operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try
again.
At line:1 char:1
+ PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service- ...
+ ~~~~~~~~~~~~~~
    + CategoryInfo : ObjectNotFound: (PowerShell.exe:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

```

Still it is showing error. Do i need to change any setting in `install-service-filebeat.ps1` file?  
I also tried like this `Set-ExecutionPolicy Unrestricted install-service-filebeat.ps1` but not working  
Thanks

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [April 25, 2017, 7:09pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/6 "2017-04-25T19:09:28Z")

</div>

And what is the output if you just try to execute the script?

`PS > .\install-service-filebeat.ps1`

Could it be an issue with your PATH? What do these show?

`PS> Get-ChildItem Env:`

`PS> $PsHome`

---

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [April 26, 2017, 2:40am UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/7 "2017-04-26T02:40:18Z")

</div>

Thanks

I managed to run my script by setting `set-ExecutionPolicy ByPass` When i installed the script it is showing like this

```
PS F:\filebeat-5.3.1-windows-x86_64\filebeat> set-ExecutionPolicy ByPass

Execution Policy Change
The execution policy helps protect you from scripts that you do not trust. Changing the execution policy might expose
you to the security risks described in the about_Execution_Policies help topic at
http://go.microsoft.com/fwlink/?LinkID=135170. Do you want to change the execution policy?
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "N"): Y
PS F:\filebeat-5.3.1-windows-x86_64\filebeat> .\install-service-filebeat.ps1

Status Name DisplayName
------ ---- -----------
Stopped filebeat filebeat

PS F:\filebeat-5.3.1-windows-x86_64\filebeat> .\install-service-filebeat.ps1

__GENUS : 2
__CLASS :__ PARAMETERS
__SUPERCLASS :
__DYNASTY :__ PARAMETERS
__RELPATH :
__PROPERTY_COUNT : 1
__DERIVATION : {}
__SERVER :
__NAMESPACE :
__PATH :
ReturnValue : 5
PSComputerName :

__GENUS : 2
__CLASS :__ PARAMETERS
__SUPERCLASS :
__DYNASTY :__ PARAMETERS
__RELPATH :
__PROPERTY_COUNT : 1
__DERIVATION : {}
__SERVER :
__NAMESPACE :
__PATH :
ReturnValue : 0
PSComputerName :

Status : Stopped
Name : filebeat
DisplayName : filebeat

```

Is this means the filebeat is running ? How can i check whether it is running or not because it is showing `Status : Stopped`  
Thanks

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [April 26, 2017, 2:07pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/8 "2017-04-26T14:07:58Z")

</div>

The installation script only creates the service for you. From that point you should resume following the Getting Started guide at Step 2 (configuration). You need to configure it, test your config, then start the service.

---

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [April 26, 2017, 5:22pm UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/9 "2017-04-26T17:22:31Z")

</div>

Thanks

When i started the service in services.msc it is not showing the service is disabled and now it is throwing error like this

```
PS F:\filebeat-5.3.1-windows-x86_64\filebeat> PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-fileb
eat.ps1

__GENUS : 2
__CLASS :__ PARAMETERS
__SUPERCLASS :
__DYNASTY :__ PARAMETERS
__RELPATH :
__PROPERTY_COUNT : 1
__DERIVATION : {}
__SERVER :
__NAMESPACE :
__PATH :
ReturnValue : 5
PSComputerName :

__GENUS : 2
__CLASS :__ PARAMETERS
__SUPERCLASS :
__DYNASTY :__ PARAMETERS
__RELPATH :
__PROPERTY_COUNT : 1
__DERIVATION : {}
__SERVER :
__NAMESPACE :
__PATH :
ReturnValue : 0
PSComputerName :

New-Service : Service 'filebeat (filebeat)' cannot be created due to the following error: The specified service has
been marked for deletion
At F:\filebeat-5.3.1-windows-x86_64\filebeat\install-service-filebeat.ps1:12 char:1
+ New-Service -name filebeat `
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : PermissionDenied: (filebeat:String) [New-Service], ServiceCommandException
    + FullyQualifiedErrorId : CouldNotNewService,Microsoft.PowerShell.Commands.NewServiceCommand

```

May i know what more i have to do to get this up and running?

Thanks

---

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [April 27, 2017, 2:57am UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/10 "2017-04-27T02:57:38Z")

</div>

The problem is i think have installed the zip in F dir when i installed in C dir it is working fine May be i have to change some settings in script if i had installed in F dir.

Thanks @andrewkroh

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 25, 2017, 3:01am UTC](https://discuss.elastic.co/t/installation-of-filebeat-5-3-1-in-windows-10/83594/11 "2017-05-25T03:01:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
