# Why Filebeat cannot start and work correctly on windows

**URL:** <https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 12, 2023, 12:57pm UTC](https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926 "2023-11-12T12:57:58Z")\
**Posts on this page:** 4\
**Page:** 2

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [November 16, 2023, 6:53am UTC](https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926/21 "2023-11-16T06:53:22Z")

</div>

What is the content of that file what are the first few lines?

Are you sure that filebeat has permission to read?

Not sure what to tell you

Doesn't `Program Data` have a space in it?

Also try putting the path in quotes

---

<div class="post-metadata">

**Author:** ![baber1223](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baber1223/32/83533_2.png) [@baber1223](https://discuss.elastic.co/u/baber1223)\
**Post date:** [November 16, 2023, 7:52am UTC](https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926/22 "2023-11-16T07:52:21Z")

</div>

@stephenb

I am not sure filebeat has permission to my path .  
No there are not any space and this is exactly path

```auto
c:\ProgramData\Veeam\Backup\

```

Now I changed the path such as follow

```auto
'c:\ProgramData\Veeam\Backup\Svc.VeeamBackup'

```

did not any change in my elastic

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [November 16, 2023, 2:37pm UTC](https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926/23 "2023-11-16T14:37:58Z")

</div>

Not sure what to tell you. I would create a test file with a couple log lines in it and try another file... Clearly there's something basic wrong. I just can't see it.

You definitely need to use quotes for the path see [here](https://www.elastic.co/guide/en/beats/filebeat/8.11/yaml-tips.html#wrap-paths-in-quotes)

> **[Avoid YAML formatting problems | Filebeat Reference \[8.11\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/8.11/yaml-tips.html#wrap-paths-in-quotes)**

Sorry I can't help but you just need to keep working on it.

Create a test file, put it in a simple directory and test that out.

You do need to validate that the file has read permission. It's your server so you need to check that and figure it out

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 14, 2023, 2:38pm UTC](https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926/24 "2023-12-14T14:38:29Z")

</div>

Closed on December 14, 2023, 2:38pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/why-filebeat-cannot-start-and-work-correctly-on-windows/346926.md?page=1)
