# Winlogbeat Fatal Error 8.7.0+ name already used

**URL:** <https://discuss.elastic.co/t/winlogbeat-fatal-error-8-7-0-name-already-used/337093>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [June 28, 2023, 2:00pm UTC](https://discuss.elastic.co/t/winlogbeat-fatal-error-8-7-0-name-already-used/337093 "2023-06-28T14:00:46Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [June 28, 2023, 4:30pm UTC](https://discuss.elastic.co/t/winlogbeat-fatal-error-8-7-0-name-already-used/337093/4 "2023-06-28T16:30:28Z")

</div>

> [@dwissm1](#):
>
> `"message":"Failed due to panic.","service.name":"winlogbeat","error":{"message":"name Application already used"}`

On your `winlogbeat.yml` you have the `Application` name (and also others like Security and System) multiple times.

Example:

> [@dwissm1](#):
>
> ```auto
> winlogbeat.event_logs:
> - name: Application
> event_id: 1000, 1002
> ignore_older: 72h
> level: error
> provider:
> - Application Error
> - Application Hang
> - name: Application
> event_id: 1001
> ignore_older: 72h
> level: info
> provider:
> - Windows Error Reporting
> 
> ```

I'm not sure that this is possible.

---

_[View the full topic](https://discuss.elastic.co/t/winlogbeat-fatal-error-8-7-0-name-already-used/337093)._