# Logstash WMI Input Plugin donot work

**URL:** <https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404>\
**Category:** Logstash\
**Created:** [September 3, 2020, 2:26pm UTC](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404 "2020-09-03T14:26:06Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![souravtyson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/souravtyson/32/45427_2.png) [@souravtyson](https://discuss.elastic.co/u/souravtyson)\
**Post date:** [September 3, 2020, 2:26pm UTC](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404/1 "2020-09-03T14:26:06Z")

</div>

I am new to logstash and i want to gather the performance metrics of the windows system. I have been trying to run the WMI input plugin of logstash in my local setup to gather data, but it is not getting executed .This is the logstash configuration.

```auto
input {
       wmi {
        query => "select * from Win32_Process"
        interval => 10
		host => "127.0.0.1"
      }
}

output { 
	stdout {codec => rubydebug} 
}

```

i can run above query in the powershell and i get the data. Below is the error logs i get when i run the logstash.

```auto
G:\elastic-stack\logstash-7.9.0>.\bin\logstash.bat -f .\config\logstash.conf
Sending Logstash logs to G:/elastic-stack/logstash-7.9.0/logs which is now configured via log4j2.properties
[2020-09-03T17:12:01,289][INFO][logstash.runner] Starting Logstash {"logstash.version"=>"7.9.0", "jruby.version"=>"jruby 9.2.12.0 (2.5.7) 2020-07-01 db01a49ba6 Java HotSpot(TM) 64-Bit Server VM 25.241-b07 on 1.8.0_241-b07 +indy +jit [mswin32-x86_64]"}
[2020-09-03T17:12:01,623][WARN][logstash.config.source.multilocal] Ignoring the 'pipelines.yml' file because modules or command line options are specified
[2020-09-03T17:12:05,198][INFO][org.reflections.Reflections] Reflections took 75 ms to scan 1 urls, producing 22 keys and 45 values
[2020-09-03T17:12:07,548][INFO][logstash.javapipeline][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, "pipeline.sources"=>["G:/elastic-stack/logstash-7.9.0/config/logstash.conf"], :thread=>"#<Thread:0x59ce47fe run>"}
[2020-09-03T17:12:08,533][INFO][logstash.javapipeline][main] Pipeline Java execution initialization time {"seconds"=>0.94}
[2020-09-03T17:12:08,553][INFO][logstash.inputs.wmi][main] Registering wmi input {:query=>"select * from Win32_Process"}
[2020-09-03T17:12:13,858][ERROR][logstash.agent] Failed to execute action {:id=>:main, :action_type=>LogStash::ConvergeResult::FailedAction, :message=>"Could not execute action: PipelineAction::Create<main>, action_result: false", :backtrace=>nil}
[2020-09-03T17:12:14,494][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600}
[2020-09-03T17:12:19,418][INFO][logstash.runner] Logstash shut down.
[2020-09-03T17:12:19,539][ERROR][org.logstash.Logstash] java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 1, 2020, 2:26pm UTC](https://discuss.elastic.co/t/logstash-wmi-input-plugin-donot-work/247404/2 "2020-10-01T14:26:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.