Winlogbeat installation error

I am getting the error while starting the service post installation.

Error Message:

"error 1053 the service did not respond to the start or control request in a timely fashion"

Window 2016 Server

Winlogbeat version: 7.1

Try doing a config test. See #5 at https://www.elastic.co/guide/en/beats/winlogbeat/current/winlogbeat-configuration.html.

Also check the Winlogbeat logs file output for errors.

Thanks for the response.

I am getting the below error

" PS C:\ProgramData\Elastic\Winlogbeat> .\winlogbeat.exe test config -c .\winlogbeat.yml -e
2019-06-08T21:34:45.920-0400 INFO instance/beat.go:571 Home path: [C:\ProgramData\Elastic\Winlogbeat] Config pa
th: [C:\ProgramData\Elastic\Winlogbeat] Data path: [C:\ProgramData\Elastic\Winlogbeat\data] Logs path: [C:\ProgramData\E
lastic\Winlogbeat\logs]
2019-06-08T21:34:45.947-0400 INFO instance/beat.go:579 Beat ID: 7ec5c5e4-44bd-4291-831e-1d40735a84b2
2019-06-08T21:34:45.948-0400 INFO [index-management.ilm] ilm/ilm.go:129 Policy name: winlogbeat-7.1.1
2019-06-08T21:34:46.085-0400 INFO [beat] instance/beat.go:827 Beat info {"system_info": {"beat": {"path"
: {"config": "C:\ProgramData\Elastic\Winlogbeat", "data": "C:\ProgramData\Elastic\Winlogbeat\data", "home": "C:\
ProgramData\Elastic\Winlogbeat", "logs": "C:\ProgramData\Elastic\Winlogbeat\logs"}, "type": "winlogbeat", "uuid":
"7ec5c5e4-44bd-4291-831e-1d40735a84b2"}}}
2019-06-08T21:34:46.101-0400 INFO [beat] instance/beat.go:836 Build info {"system_info": {"build": {"comm
it": "3358d9a5a09e3c6709a2d3aaafde628ea34e8419", "libbeat": "7.1.1", "time": "2019-05-23T13:17:17.000Z", "version": "7.1
.1"}}}
2019-06-08T21:34:46.102-0400 INFO [beat] instance/beat.go:839 Go runtime info {"system_info": {"go": {"os":"wi
ndows","arch":"amd64","max_procs":4,"version":"go1.11.5"}}}
2019-06-08T21:34:46.111-0400 INFO [beat] instance/beat.go:843 Host info {"system_info": {"host": {"archi
tecture":"x86_64","boot_time":"2019-05-27T07:03:36.21-04:00","name":"host name","ip":["xx.xxx.xxx.xxx/xx","xx.xxx.
xx.xx/xx","::1/128","127.0.0.1/8"],"kernel_version":"6.3.9600.19358 (winblue_ltsb_escrow.190505-1600)","mac":["00:50:56:
85:0e:4d","00:50:56:85:21:0f"],"os":{"family":"windows","platform":"windows","name":"Windows Server 2012 R2 Datacenter",
"version":"6.3","major":3,"minor":0,"patch":0,"build":"9600.19356"},"timezone":"EDT","timezone_offset_sec":-14400,"id":"
32e1c222-7dab-48d4-a4f5-805c7fb65b2c"}}}
2019-06-08T21:34:46.118-0400 INFO [beat] instance/beat.go:872 Process info {"system_info": {"process": {"cw
d": "C:\ProgramData\Elastic\Winlogbeat", "exe": "C:\ProgramData\Elastic\Winlogbeat\winlogbeat.exe", "name": "winl
ogbeat.exe", "pid": 11852, "ppid": 9984, "start_time": "2019-06-08T21:34:45.690-0400"}}}
2019-06-08T21:34:46.119-0400 INFO instance/beat.go:280 Setup Beat: winlogbeat; Version: 7.1.1
2019-06-08T21:34:46.132-0400 INFO instance/beat.go:308 No outputs are defined. Please define one under the outp
ut section.
2019-06-08T21:34:46.133-0400 ERROR instance/beat.go:802 Exiting: No outputs are defined. Please define one under
the output section.
Exiting: No outputs are defined. Please define one under the output section."

Seems like you have a problem with your config file not specifying what output to send the events to (Elasticsearch, logstash, etc.). Please post your configuration file.

This topic was automatically closed after 28 days. New replies are no longer allowed.