He already said no details. However, it should be something in Event System log.
As Leandro said, try winlogbeat from console. This is always the first step to make sure that everything is OK.
Have you use the zip or msi package? There might be an issue with the data directory. Check this or this and of course add logging in winlogbeat.yml