# Unable to start service

**URL:** https://discuss.elastic.co/t/unable-to-start-service/90506
**Category:** Beats
**Tags:** winlogbeat
**Created:** [June 22, 2017, 5:38pm UTC](https://discuss.elastic.co/t/unable-to-start-service/90506 "2017-06-22T17:38:02Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sbach](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sbach](https://discuss.elastic.co/u/sbach)
#### Post date: [June 22, 2017, 5:38pm UTC](https://discuss.elastic.co/t/unable-to-start-service/90506/1 "2017-06-22T17:38:02Z")

</div>

Have ELK running on CentOS, Linux servers are sending logs as expected.

Installed service in Windows Server 16, Config test passed, getting error 1053 when trying to start service.

Running winlogbeat in foreground, works as expected and logs are being sent to ELK server and visible in Kibana.

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 27, 2017, 4:24pm UTC](https://discuss.elastic.co/t/unable-to-start-service/90506/2 "2017-06-27T16:24:08Z")

</div>

Does this occur every time you start the service? Or does it only happen on a reboot of the host?

Is the log file for Winlogbeat being written to when this occurs?

---

<div class="post-metadata">

### Author: ![sbach](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@sbach](https://discuss.elastic.co/u/sbach)
#### Post date: [June 29, 2017, 8:06pm UTC](https://discuss.elastic.co/t/unable-to-start-service/90506/3 "2017-06-29T20:06:53Z")

</div>

Sorry for the delay. Turns out I had the cert in the config as relative path, which is why it worked when starting manually as I was in that dir. Setting to absolute works fine. All good. Thanks.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 27, 2017, 8:06pm UTC](https://discuss.elastic.co/t/unable-to-start-service/90506/4 "2017-07-27T20:06:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
