# Packetbeat installation problem

**URL:** https://discuss.elastic.co/t/packetbeat-installation-problem/134732
**Category:** Beats
**Tags:** packetbeat
**Created:** [June 6, 2018, 6:44am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732 "2018-06-06T06:44:24Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![Saketh\_Chandra\_Kolis](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)
#### Post date: [June 6, 2018, 6:44am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/1 "2018-06-06T06:44:25Z")

</div>

PS C:\Program Files\Packetbeat\> PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-packetbeat.ps1.

Security warning  
Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your  
computer. If you trust this script, use the Unblock-File cmdlet to allow the script to run without this warning  
message. Do you want to run C:\Program Files\Packetbeat\install-service-packetbeat.ps1?  
[D] Do not run [R] Run once [S] Suspend [?] Help (default is "D"): R

\_\_GENUS : 2  
\_\_CLASS : \_\_PARAMETERS  
\_\_SUPERCLASS :  
\_\_DYNASTY : \_\_PARAMETERS  
\_\_RELPATH :  
\_\_PROPERTY\_COUNT : 1  
\_\_DERIVATION : {}  
\_\_SERVER :  
\_\_NAMESPACE :  
\_\_PATH :  
ReturnValue : 5  
PSComputerName :

\_\_GENUS : 2  
\_\_CLASS : \_\_PARAMETERS  
\_\_SUPERCLASS :  
\_\_DYNASTY : \_\_PARAMETERS  
\_\_RELPATH :  
\_\_PROPERTY\_COUNT : 1  
\_\_DERIVATION : {}  
\_\_SERVER :  
\_\_NAMESPACE :  
\_\_PATH :  
ReturnValue : 0  
PSComputerName :

Status : Stopped  
Name : packetbeat  
DisplayName : packetbeat

has the packet beat installed ?  
when i try to run the command  
`./packetbeat -e -c packetbeat.yml`  
there is not output.  
even when i try to test if the config file is okay by using  
./packetbeat -configtest packetbeat.yml i dont get any output

---

<div class="post-metadata">

### Author: ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)
#### Post date: [June 6, 2018, 10:04pm UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/2 "2018-06-06T22:04:19Z")

</div>

Hi @Saketh_Chandra_Kolis,

To start packetbeat in windows you have to run:

```auto
PS CPS C:\Program Files\Packetbeat> Start-Service packetbeat

```

By default the log files are stored in C:\ProgramData\packetbeat\Logs.

See [https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-starting.html](https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-starting.html)

---

<div class="post-metadata">

### Author: ![Saketh\_Chandra\_Kolis](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)
#### Post date: [June 8, 2018, 5:11am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/3 "2018-06-08T05:11:27Z")

</div>

```
PS C:\> cd 'Program Files\Packetbeat'
PS C:\Program Files\Packetbeat> Start-Service packetbeat
Start-Service : Service 'packetbeat (packetbeat)' cannot be started due to the following error: Cannot start service
packetbeat on computer '.'.
At line:1 char:1
+ Start-Service packetbeat
+ ~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : OpenError: (System.ServiceProcess.ServiceController:ServiceController) [Start-Service],
   ServiceCommandException
    + FullyQualifiedErrorId : CouldNotStartService,Microsoft.PowerShell.Commands.StartServiceCommand
```

---

<div class="post-metadata">

### Author: ![Saketh\_Chandra\_Kolis](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)
#### Post date: [June 8, 2018, 5:17am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/4 "2018-06-08T05:17:12Z")

</div>

hi @exekias  
Packetbeat is installed but i am still facing problems.

---

<div class="post-metadata">

### Author: ![Saketh\_Chandra\_Kolis](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)
#### Post date: [June 8, 2018, 5:38am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/5 "2018-06-08T05:38:22Z")

</div>

hi,  
Also when i tried to run ./packetbeat -e -c packetbeat.yml -d "elasticsearch" I get no output.Is there any problem with the installation or the .yml fie.Please help

PS C:\> cd 'Program Files\Packetbeat'  
PS C:\Program Files\Packetbeat\> ./packetbeat -e -c packetbeat.yml -d "elasticsearch"  
PS C:\Program Files\Packetbeat\>  
Thanks!

---

<div class="post-metadata">

### Author: ![adrisr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adrisr/32/25423_2.png) [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [June 8, 2018, 9:44am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/6 "2018-06-08T09:44:38Z")

</div>

Hi,

With the package from [https://www.elastic.co/downloads/beats/packetbeat](https://www.elastic.co/downloads/beats/packetbeat) I get output executing your commands.

What package did you install to `C:\Program Files\packetbeat`? What is the packetbeat version you're trying to run?

Did you install WinPCAP as required by [https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-installation.html#win](https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-installation.html#win) ?

---

<div class="post-metadata">

### Author: ![Saketh\_Chandra\_Kolis](https://avatars.discourse-cdn.com/v4/letter/s/58956e/32.png) [@Saketh\_Chandra\_Kolis](https://discuss.elastic.co/u/Saketh_Chandra_Kolis)
#### Post date: [June 11, 2018, 4:46am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/7 "2018-06-11T04:46:51Z")

</div>

hi,  
i didn't install winpcap..nw its working

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 9, 2018, 4:56am UTC](https://discuss.elastic.co/t/packetbeat-installation-problem/134732/8 "2018-07-09T04:56:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
