# Winlogbeat can't start the service (Solved)

**URL:** https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687
**Category:** Beats
**Tags:** winlogbeat
**Created:** [June 2, 2016, 1:02pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687 "2016-06-02T13:02:16Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![suresh](https://avatars.discourse-cdn.com/v4/letter/s/aca169/32.png) [@suresh](https://discuss.elastic.co/u/suresh)
#### Post date: [June 2, 2016, 1:02pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687/1 "2016-06-02T13:02:16Z")

</div>

i am getting the following error

PS C:\Program Files\winlogbeat\> Start-Service winlogbeat  
Start-Service : Service 'winlogbeat (winlogbeat)' cannot be started due to the following error: Cannot start service  
winlogbeat on computer '.'.  
At line:1 char:1

- Start-Service winlogbeat
- 

```auto
  + CategoryInfo : OpenError: (System.ServiceProcess.ServiceController:ServiceController) [Start-Service],
 ServiceCommandException
  + FullyQualifiedErrorId : CouldNotStartService,Microsoft.PowerShell.Commands.StartServiceCommand

```

looks like everything else is working.

can someone help me. thank you

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 2, 2016, 1:35pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687/2 "2016-06-02T13:35:51Z")

</div>

See this comment: [Error: Cannot start service winlogbeat](https://discuss.elastic.co/t/error-cannot-start-service-winlogbeat/47138/2)

---

<div class="post-metadata">

### Author: ![suresh](https://avatars.discourse-cdn.com/v4/letter/s/aca169/32.png) [@suresh](https://discuss.elastic.co/u/suresh)
#### Post date: [June 2, 2016, 2:37pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687/4 "2016-06-02T14:37:04Z")

</div>

i am running winlogbeat 1.2.3 to logstash 2.2

---

<div class="post-metadata">

### Author: ![suresh](https://avatars.discourse-cdn.com/v4/letter/s/aca169/32.png) [@suresh](https://discuss.elastic.co/u/suresh)
#### Post date: [June 2, 2016, 3:01pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687/5 "2016-06-02T15:01:06Z")

</div>

Suggestion [3,General]: The command winlogbeat.exe was not found, but does exist in the current location. Windows PowerS  
hell does not load commands from the current location by default. If you trust this command, instead type ".\winlogbeat.  
exe". See "get-help about\_Command\_Precedence" for more details.

when i tryed that it hangs

---

<div class="post-metadata">

### Author: ![suresh](https://avatars.discourse-cdn.com/v4/letter/s/aca169/32.png) [@suresh](https://discuss.elastic.co/u/suresh)
#### Post date: [June 2, 2016, 6:10pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687/6 "2016-06-02T18:10:25Z")

</div>

found the solution:

> [@Winlogbeat TLS Connection to Logstash](https://discuss.elastic.co/t/winlogbeat-tls-connection-to-logstash/41905/2):
>
> Winlogbeat supports using TLS on the Logstash output. Can you post the configuration that you are using for Winlogbeat and for Logstash. Also, what errors are you seeing?

tls:  
certificate\_authorities: ["C:/ProgramData/winlogbeat/logstash-forwarder.crt"]

when i input the directory path: everything worked.

thank you for your help.

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 13, 2016, 10:58pm UTC](https://discuss.elastic.co/t/winlogbeat-cant-start-the-service-solved/51687/7 "2016-06-13T22:58:56Z")

</div>


