# Windows beats and Logstash

**URL:** https://discuss.elastic.co/t/windows-beats-and-logstash/122674
**Category:** Beats
**Tags:** winlogbeat
**Created:** [March 6, 2018, 8:49am UTC](https://discuss.elastic.co/t/windows-beats-and-logstash/122674 "2018-03-06T08:49:37Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Raj\_Kumar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raj_kumar/32/25420_2.png) [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)
#### Post date: [March 6, 2018, 8:49am UTC](https://discuss.elastic.co/t/windows-beats-and-logstash/122674/1 "2018-03-06T08:49:37Z")

</div>

Hi All,

Am trying to send the windows events from AD to logstash through winlogbeat. I have enabled the TLS in elastic and kibana , i use the cert and key generated by my CA. It works perfectly fine. I was trying to encrypt the data from beats to logstash as well.So I used the same set of certs since its a single node server.Iam unable to start the windows agent I get this message stating

```auto
|2018-03-05T15:15:50.293+0100|INFO|instance/beat.go:468|Home path: [C:\Program Files\winlogbeat-6.2.1-windows-x86_64] Config path: [C:\Program Files\winlogbeat-6.2.1-windows-x86_64] Data path: [C:\\ProgramData\\winlogbeat] Logs path: [C:\\ProgramData\\winlogbeat\logs]|
|---|---|---|---|
|2018-03-05T15:15:50.295+0100|INFO|instance/beat.go:475|Beat UUID: f671dd55-adb6-4f5c-bd1f-ad360c410430|
|2018-03-05T15:15:50.295+0100|INFO|instance/beat.go:213|Setup Beat: winlogbeat; Version: 6.2.1|
|2018-03-05T15:15:50.295+0100|WARN|instance/metrics_other.go:8|Metrics not implemented for this OS.|
|2018-03-05T15:15:50.295+0100|ERROR|outputs/tls.go:178|Failed reading certificate file C:\Program Files\winlogbeat-6.2.1-windows-x86_64\Certifcates\capm.crt: no pem file|
|2018-03-05T15:15:50.296+0100|ERROR|instance/beat.go:667|Exiting: error initializing publisher: 1 error: no pem file C:\Program Files\winlogbeat-6.2.1-windows-x86_64\Certifcates\capm.crt|

```

Please do help me to fix this issue .  
Thanks,  
Raj

---

<div class="post-metadata">

### Author: ![Raj\_Kumar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/raj_kumar/32/25420_2.png) [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)
#### Post date: [March 6, 2018, 10:32am UTC](https://discuss.elastic.co/t/windows-beats-and-logstash/122674/2 "2018-03-06T10:32:14Z")

</div>

I recreated the cert and key it worked 🙂

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 3, 2018, 10:32am UTC](https://discuss.elastic.co/t/windows-beats-and-logstash/122674/3 "2018-04-03T10:32:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
