# New X-Pack Installation

**URL:** https://discuss.elastic.co/t/new-x-pack-installation/92346
**Category:** Elasticsearch
**Created:** [July 8, 2017, 1:53am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346 "2017-07-08T01:53:41Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![waterwalker23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/waterwalker23/32/19707_2.png) [@waterwalker23](https://discuss.elastic.co/u/waterwalker23)
#### Post date: [July 8, 2017, 1:53am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346/1 "2017-07-08T01:53:41Z")

</div>

All,

I'm brand new to ELK. I got it up and running on a linux installation and currently I have one windows server sending it's logs to elasticsearch. I decided to install the X-Pack and since doing that logs are not being transmitted.

I'm a little unsure about what configuration changes I likely need to make. Can someone point me in the right direction? Do I need to alter kibana, elasticsearch and/or logstash yml files? Here's an example of what i'm seeing in my winlogbeat log.

2017-07-07T20:32:25-05:00 INFO Home path: [C:\Program Files\winlogbeat] Config path: [C:\Program Files\winlogbeat] Data path: [C:\ProgramData\winlogbeat] Logs path: [C:\Program Files\winlogbeat\logs]  
2017-07-07T20:32:25-05:00 INFO Setup Beat: winlogbeat; Version: 5.4.3  
2017-07-07T20:32:25-05:00 INFO Loading template enabled. Reading template file: C:\Program Files\winlogbeat\winlogbeat.template.json  
2017-07-07T20:32:25-05:00 INFO Loading template enabled for Elasticsearch 2.x. Reading template file: C:\Program Files\winlogbeat\winlogbeat.template-es2x.json  
2017-07-07T20:32:25-05:00 INFO Loading template enabled for Elasticsearch 6.x. Reading template file: C:\Program Files\winlogbeat\winlogbeat.template-es6x.json  
2017-07-07T20:32:25-05:00 INFO Elasticsearch url: [http://10.240.1.130:9200](http://10.240.1.130:9200)  
2017-07-07T20:32:25-05:00 INFO Activated elasticsearch as output plugin.  
2017-07-07T20:32:25-05:00 INFO Publisher name: mcgarrett  
2017-07-07T20:32:25-05:00 INFO Flush Interval set to: 1s  
2017-07-07T20:32:25-05:00 INFO Max Bulk Size set to: 50  
2017-07-07T20:32:25-05:00 INFO State will be read from and persisted to C:\ProgramData\winlogbeat.winlogbeat.yml

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 8, 2017, 2:42am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346/2 "2017-07-08T02:42:15Z")

</div>

You will need to do the Logstash step here [https://www.elastic.co/guide/en/x-pack/current/logstash.html](https://www.elastic.co/guide/en/x-pack/current/logstash.html)

---

<div class="post-metadata">

### Author: ![waterwalker23](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/waterwalker23/32/19707_2.png) [@waterwalker23](https://discuss.elastic.co/u/waterwalker23)
#### Post date: [July 20, 2017, 1:27am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346/3 "2017-07-20T01:27:05Z")

</div>

I apologize for not responding. I was aboe to resolve this issue.

Thanks!

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 20, 2017, 3:29am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346/4 "2017-07-20T03:29:19Z")

</div>

How did you resolve it?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 17, 2017, 3:30am UTC](https://discuss.elastic.co/t/new-x-pack-installation/92346/5 "2017-08-17T03:30:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
