Packetbeat service does not start

hello,

I am trying to run packetbeat service but its giving error ..here is details. I am using Windows 10. No error in logs and config files

PS C:\Packetbeat> PowerShell.exe -ExecutionPolicy UnRestricted -File .\install-service-packetbeat.ps1

Security warning
Run only scripts that you trust. While scripts from the internet can be useful, this script can potentially harm your
computer. If you trust this script, use the Unblock-File cmdlet to allow the script to run without this warning
message. Do you want to run C:\Packetbeat\install-service-packetbeat.ps1?
[D] Do not run [R] Run once [S] Suspend [?] Help (default is "D"): R

__GENUS : 2
__CLASS : __PARAMETERS
__SUPERCLASS :
__DYNASTY : __PARAMETERS
__RELPATH :
__PROPERTY_COUNT : 1
__DERIVATION : {}
__SERVER :
__NAMESPACE :
__PATH :
ReturnValue : 5
PSComputerName :

__GENUS : 2
__CLASS : __PARAMETERS
__SUPERCLASS :
__DYNASTY : __PARAMETERS
__RELPATH :
__PROPERTY_COUNT : 1
__DERIVATION : {}
__SERVER :
__NAMESPACE :
__PATH :
ReturnValue : 0
PSComputerName :

Status : Stopped
Name : packetbeat
DisplayName : packetbeat

PS C:\Packetbeat> Start-Service packetbeat
Start-Service : Service 'packetbeat (packetbeat)' cannot be started due to the following error: Cannot start service
packetbeat on computer '.'.
At line:1 char:1

  • Start-Service packetbeat
  •   + CategoryInfo          : OpenError: (System.ServiceProcess.ServiceController:ServiceController) [Start-Service],
     ServiceCommandException
      + FullyQualifiedErrorId : CouldNotStartService,Microsoft.PowerShell.Commands.StartServiceCommand
    
    

PS C:\Packetbeat> .\packetbeat.exe -c packetbeat.yml -configtest
PS C:\Packetbeat>

Do you have a pcap DLL installed? https://www.elastic.co/guide/en/beats/packetbeat/5.6/packetbeat-installation.html

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.