# Packet on window

**URL:** https://discuss.elastic.co/t/packet-on-window/234177
**Category:** Beats
**Tags:** packetbeat
**Created:** [May 25, 2020, 3:45pm UTC](https://discuss.elastic.co/t/packet-on-window/234177 "2020-05-25T15:45:19Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Guddu\_Prasad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guddu_prasad/32/68971_2.png) [@Guddu\_Prasad](https://discuss.elastic.co/u/Guddu_Prasad)
#### Post date: [May 25, 2020, 3:45pm UTC](https://discuss.elastic.co/t/packet-on-window/234177/1 "2020-05-25T15:45:19Z")

</div>

Hi Team,

I trying to use Packetbeat on a windows machine.  
I have placed the Packetbeat folder in c:/program file and when I start the service using the command I can see the Packetbeat service get started however I do not see any logs in the dashboard.  
But I run using .\packetbeat.exe -e I see the logs in the dashboard.

Packetbeat version:7.7.0

Thanks  
Guddu Prasad

---

<div class="post-metadata">

### Author: ![Andre\_Letterer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andre_letterer/32/42248_2.png) [@Andre\_Letterer](https://discuss.elastic.co/u/Andre_Letterer)
#### Post date: [June 4, 2020, 12:42am UTC](https://discuss.elastic.co/t/packet-on-window/234177/2 "2020-06-04T00:42:23Z")

</div>

Hi Guddu,

a short question about if you went through the documentation?  
[https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-configuration.html](https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-configuration.html)  
[https://www.elastic.co/guide/en/beats/packetbeat/current/configuration-interfaces.html](https://www.elastic.co/guide/en/beats/packetbeat/current/configuration-interfaces.html)

Did you first list your network devices?  
`packetbeat devices`  
Did you check your `packetbeat.yml` if your setting `packetbeat.interfaces.device` is matching your devices your want to monitor?

How did you install the packetbeat?  
[https://www.elastic.co/downloads/beats/packetbeat](https://www.elastic.co/downloads/beats/packetbeat)

Did you download the ZIP or the MSI file?  
What operating system exactly do you use and what Antivirus software?

Because only MSI packages have signed binaries, in case it is an issue with antivirus.

I mean we do have a fix about termination of beat services:

> <https://github.com/elastic/beats/pull/18916>

Can you start your service using powershell?

```auto
Get-Service packetbeat | Start-Service

```

What happens in the Eventlog `System` and `Application` at the same time when you start the Service?  
System:

```auto
$TargetLog = "System"
$idx = (Get-EventLog -LogName $TargetLog -Newest 1).Index
while ($true)
{
    Start-Sleep -Seconds 1
    $idx2 = (Get-EventLog -LogName $TargetLog -newest 1).index
    Get-EventLog -LogName $TargetLog -Newest ($idx2 - $idx) |
    Sort-Object -Property index
    $idx = $idx2
}

```

and Application:

```auto
$TargetLog = "Application"
$idx = (Get-EventLog -LogName $TargetLog -Newest 1).Index
while ($true)
{
    Start-Sleep -Seconds 1
    $idx2 = (Get-EventLog -LogName $TargetLog -newest 1).index
    Get-EventLog -LogName $TargetLog -Newest ($idx2 - $idx) |
    Sort-Object -Property index
    $idx = $idx2
}

```

What happens in the packetbeat logfile? Should be normally in c:\ProgramData\packetbeat\logs\packetbeat

```auto
Get-Content c:\ProgramData\packetbeat\logs\packetbeat -Wait -Tail 10

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 2, 2020, 2:42am UTC](https://discuss.elastic.co/t/packet-on-window/234177/3 "2020-07-02T02:42:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.