How exactly does one upgrade the winlogbeat agent on a windows host as the docs are really quite lacking. I am running the beat as a service. I tried copying all of the new files and running the uninstall and install powershell scripts but all that did was break the service and now it will not start with a 1503 service error.
hi @greyfire, can you try starting Winlogbeat in the foreground (not as a service) and see if there are any errors. This is similar to what we recommend in the Getting Started guide to test the configuration prior running it as a service, but this will actually run it with full debug enabled.
PS C:\Program Files\Winlogbeat>.\winlogbeat.exe -c winlogbeat.yml -e -v -d "*"
If you get no results, can you post the console output here and the content of the winlogbeat.yml file.