# Stopping/uninstalling Winlogbeat 8.8.2 fails

**URL:** https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209
**Category:** Beats
**Tags:** winlogbeat
**Created:** [October 17, 2023, 12:55pm UTC](https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209 "2023-10-17T12:55:07Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![ben-sec](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ben-sec/32/107365_2.png) [@ben-sec](https://discuss.elastic.co/u/ben-sec)
#### Post date: [October 17, 2023, 12:55pm UTC](https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209/1 "2023-10-17T12:55:07Z")

</div>

Hello!

I have problems with Winlogbeat 8.8.2 on 5% of my clients (service is running but I don't get any logs) and want to get rid of it, but I'm unable to stop the service and to uninstall Winlogbeat. Is there any kind of forced uninstall feature that I'm not aware of or what does the trick?

Cheers, Ben

---

<div class="post-metadata">

### Author: ![Shaakxuur](https://avatars.discourse-cdn.com/v4/letter/s/ccd318/32.png) [@Shaakxuur](https://discuss.elastic.co/u/Shaakxuur)
#### Post date: [October 17, 2023, 1:00pm UTC](https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209/2 "2023-10-17T13:00:29Z")

</div>

Have you tried to use a privileged powershell session?

```auto
stop-service -name winlogbeat -force

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 14, 2023, 3:00pm UTC](https://discuss.elastic.co/t/stopping-uninstalling-winlogbeat-8-8-2-fails/345209/3 "2023-11-14T15:00:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.